Two-factor sign-in with passkeys and e-mail codes, campaign links and tracking pixels, deleting data by filter, and a tidier settings and phone layout.
Tidemark 0.36 is out. It tightens how you sign in, adds a way to measure campaigns without handing clicks to a third party, and gives you a precise tool for removing data that should not be there.
An authenticator app is still the default, and setting one up now shows a QR code to scan. You can also turn on e-mail codes (a one-time code sent to your account address, which needs outgoing e-mail on your install) and passkeys: your fingerprint, face, screen lock or a security key, as many as you like per account. At sign-in the page offers whichever methods you have set up.
Turning on the first method gives you ten recovery codes, shown once, for the day you lose your phone or key. You can make a new set from Settings → Security, which replaces the old one. Removing a method asks for your password.
Site settings has a new Campaigns tab. The link builder adds UTM values to any page of your site and shows the result as you type, so visits from a campaign show up under Sources and Campaigns. Two things build on it:
/l/abc) counts a click and forwards to the page with its UTM values./p/abc.gif) counts a view when a newsletter loads it.Both keep only a daily total per link: no cookies, no addresses, no visit. Opens are approximate, because mail apps may preload or block images. A short link can only point at a page on your own site. On Tidemark Cloud, creating campaign links is part of Pro; links that already exist keep forwarding.
If something sensitive did get recorded, or a test run polluted the data, “reset all statistics” is too blunt. Site settings → Data now has Delete by filter. Choose conditions (a page, a country, a source or campaign, a browser, an event or an event property) and an optional date range, preview how many visits and events match, then confirm by typing the site’s domain.
A matching visit is deleted whole, with everything recorded during it, so your reports stay consistent. Imported history is not touched. Owners and admins can use it, and each deletion is logged with who ran it.
A site’s settings sections now sit under Settings in the sidebar instead of a second list on the page. On phones the top bar is lighter: the menu, the site or page you are on, Find and your account. The organization switcher and the live visitor count moved to the top of the menu, and more controls are easy to tap.
Self-hosted installs update from the dashboard as usual, and the new tables are created automatically. E-mail codes need outgoing e-mail; everything else works on any install.