# Umami

> Install Umami analytics on Fortly in one step: the admin password, tracking a website, where visitor locations come from, and its secret.

Source: https://docs.fortly.com/apps/umami

[Umami](https://umami.is) is privacy-first web analytics: page views, visitors, referrers, countries and devices, collected without cookies, so your site does not need a consent banner for it.

It runs on Fortly's Workers runtime, the same engine as a Next.js app you deploy yourself, and keeps every visit in the project's PostgreSQL database. Nothing runs between requests, and the first request after a quiet spell starts it in about a second.

## Install it

The installer asks for one thing: an admin password of at least 12 characters. It creates Umami's tables, then replaces Umami's well-known default login with your password before the app is reachable. Sign in at the project's address with the username `admin`.

Through the API, send the password as `admin_password`:

```bash
curl -X POST "https://api.fortly.com/projects/$PROJECT/app-templates/umami/install" \
  --header "Authorization: Bearer $FORTLY_TOKEN" \
  --header "Content-Type: application/json" \
  --data '{"admin_password": "replace-with-a-long-password"}'
```

## Track a website

1. In Umami, open **Settings › Websites** and add your site.
2. Copy its tracking code and paste it into your site's `<head>`. It loads `script.js` from your Umami project's address and sends each visit to `/api/send` there.
3. Visit your site; the visit appears in Umami within a few seconds.

You can give Umami its own domain on the project's **Domains** tab, for example `stats.example.com`, and use that address in the tracking code.

## Where visitor locations come from

Fortly is served through Cloudflare, which tells Umami each visitor's country, region and city. There is no GeoIP database to download or keep current. Umami never stores the visitor's IP address.

## Its secret

The install generates `APP_SECRET`, unique to this project, which Umami uses to sign logins. Changing it signs everybody out. You can see its name, never its value, under the project's **Deployments › Environment**.

## After installing

Umami is an ordinary project once it is installed. See [after installing](https://docs.fortly.com/apps#after-installing) for its domains, logs and database, and [installing an app](https://docs.fortly.com/apps#install-an-app) for the console and API steps every app shares.

For a summary of what the Umami app includes and how it compares with the other one-click apps, see [Umami on fortly.com](https://fortly.com/apps/umami).