From a58f56e44241ccb4be03d08cc00040709db237c4 Mon Sep 17 00:00:00 2001
From: dimafa <dimafa@users.noreply.github.com>
Date: Sat, 6 Jun 2026 06:57:48 -0400
Subject: [PATCH 1/2] Gate SimpleAnalytics injection behind
 VITE_APP_DISABLE_TRACKING

The third-party SimpleAnalytics script (scripts.simpleanalyticscdn.com) was
injected on every PROD build, ignoring VITE_APP_DISABLE_TRACKING. Self-hosters
who set that flag (as the excalidraw-full deployment does) still shipped a
third-party tracker that beacons page paths.

Gate the injection on the flag, matching the existing template pattern used for
VITE_APP_DEV_DISABLE_LIVE_RELOAD. Default behavior is unchanged when the flag is
unset.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 excalidraw-app/index.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/excalidraw-app/index.html b/excalidraw-app/index.html
index 7eac3e39a20f..a729d206df7d 100644
--- a/excalidraw-app/index.html
+++ b/excalidraw-app/index.html
@@ -216,8 +216,8 @@ <h1 class="visually-hidden">Excalidraw</h1>
     </header>
     <div id="root"></div>
     <script type="module" src="index.tsx"></script>
-    <% if (typeof PROD != 'undefined' && PROD == true) { %>
-    <!-- 100% privacy friendly analytics -->
+    <% if (typeof PROD != 'undefined' && PROD == true && (typeof VITE_APP_DISABLE_TRACKING == 'undefined' || VITE_APP_DISABLE_TRACKING != 'yes')) { %>
+    <!-- Analytics (skipped when VITE_APP_DISABLE_TRACKING=yes) -->
     <script>
       // need to load this script dynamically bcs. of iframe embed tracking
       var scriptEle = document.createElement("script");

From 1b9eaa0c07d63e90ccd58d5c83e36a40bb6e4cd4 Mon Sep 17 00:00:00 2001
From: dimafa <dimafa@users.noreply.github.com>
Date: Sat, 6 Jun 2026 07:04:45 -0400
Subject: [PATCH 2/2] Address review: also accept 'true'/boolean true for
 VITE_APP_DISABLE_TRACKING

Users often set boolean-like env vars to true; accept 'yes', 'true', or boolean
true so tracking is reliably disabled regardless of the form used.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 excalidraw-app/index.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/excalidraw-app/index.html b/excalidraw-app/index.html
index a729d206df7d..6d8ee6fab9b6 100644
--- a/excalidraw-app/index.html
+++ b/excalidraw-app/index.html
@@ -216,8 +216,8 @@ <h1 class="visually-hidden">Excalidraw</h1>
     </header>
     <div id="root"></div>
     <script type="module" src="index.tsx"></script>
-    <% if (typeof PROD != 'undefined' && PROD == true && (typeof VITE_APP_DISABLE_TRACKING == 'undefined' || VITE_APP_DISABLE_TRACKING != 'yes')) { %>
-    <!-- Analytics (skipped when VITE_APP_DISABLE_TRACKING=yes) -->
+    <% if (typeof PROD != 'undefined' && PROD == true && (typeof VITE_APP_DISABLE_TRACKING == 'undefined' || (VITE_APP_DISABLE_TRACKING != 'yes' && VITE_APP_DISABLE_TRACKING != 'true' && VITE_APP_DISABLE_TRACKING !== true))) { %>
+    <!-- Analytics (skipped when VITE_APP_DISABLE_TRACKING is enabled) -->
     <script>
       // need to load this script dynamically bcs. of iframe embed tracking
       var scriptEle = document.createElement("script");