Consent-aware analytics contracts for MUPZAOS

Google Tag, analytics, Cloudflare and local product metrics are modeled as redacted public-ID contracts. No scripts are injected and POS LAN workflows remain independent in this mock.

ReadinessProviders: 4Ready providers: 0Allowed events: 3Blocked events: 3

Script injection disabledtrue

Env values redactedtrue

Consent requiredtrue

POS LAN unaffectedtrue

Cashier risk data blockedtrue

Manager PIN blockedtrue

OTP data blockedtrue

Kitchen/waiter private data blockedtrue

Provider contracts

Google Tag ManagerEnv required

Google Tag

GTM ID is modeled as a public client id; no script is injected in this mock sprint.

NEXT_PUBLIC_GTM_ID

Google AnalyticsEnv required

Google Analytics

Use only privacy-safe aggregate events after consent policy is enabled.

NEXT_PUBLIC_GA_MEASUREMENT_ID

Cloudflare Web AnalyticsEnv required

Cloudflare

Cloudflare analytics token is public site configuration, but the value still stays outside source.

NEXT_PUBLIC_CLOUDFLARE_ANALYTICS_TOKEN

MUPZAOS product metricsEnv required

Local aggregate metrics contract

Local metrics are aggregate-only and can queue offline without external network calls.

NEXT_PUBLIC_METRICS_ENABLEDNEXT_PUBLIC_METRICS_DRY_RUN

Event contract

page_view_owner_panelAllowed

Source: owner_panelPII-free: trueOffline-safe: false

Owner/admin page views are allowed after consent and env readiness.

qr_menu_viewAllowed

Source: website_qrPII-free: trueOffline-safe: false

QR menu views can be tracked as anonymous aggregate events.

pos_order_source_summaryAllowed

Source: pos_desktopPII-free: trueOffline-safe: true

POS source counts can queue locally and sync as aggregate metrics later.

manager_pin_entryBlocked

Source: pos_desktopPII-free: falseOffline-safe: true

Manager PIN and approval code data must never go to metrics or tag providers.

waiter_table_noteBlocked

Source: waiter_appPII-free: falseOffline-safe: true

Waiter free-text/private notes stay inside order/audit systems, not analytics.

kitchen_ticket_noteBlocked

Source: kitchen_desktopPII-free: falseOffline-safe: true

Kitchen ticket details are operational data, not tag payloads.