The DMGs sit behind Cloudflare with caching bypassed, so no server of ours ever saw a download. /api/download records app, version, country, platform and a keyed address hash, then redirects to the CDN. /slab now loads the visit tracker, and the analytics MCP gains direct_downloads (leaving out the fleet by hash) plus Aesel in app_downloads.