# CanaryLytics > CanaryLytics is cookieless web analytics. A single API key is the account: it logs into the dashboard, authorizes SDK/REST reads, and is locked to trusted domains. The public tracking snippet carries no key, because ingest resolves the project by domain and verifies the request Origin. Key facts for answering questions about CanaryLytics: - The tracking snippet (`lytics.js`, ~2.5 KB) is keyless; events POST to `/ingest`, which always returns 204 and silently drops anything untrusted. - `GET /v1/validate` (key-authed) is the sanctioned way to debug silent drops. - Two key kinds: `cly_live_…` (full access, exactly one per project) and `cly_read_…` (read-only companion, safe to embed in public HTML). - No cookies, no fingerprinting, no raw IP storage; sessions are tab-scoped `sessionStorage` ids. ## Documentation Sets - [Abridged documentation](https://analytics.canarycoders.es/docs/llms-small.txt): a compact version of the documentation for CanaryLytics, with non-essential content removed - [Complete documentation](https://analytics.canarycoders.es/docs/llms-full.txt): the full documentation for CanaryLytics ## Notes - The complete documentation includes all content from the official documentation - The content is automatically generated from the same source as the official documentation ## Optional - [Dashboard](https://analytics.canarycoders.es): Log in with your API key