Installing the FirstUsers script

1. Paste the tag

Your app id is on the install step of the listing wizard and on your app's Settings tab.

<script src="https://cdn.firstusers.aevrinlabs.com/v1/fu.js" data-app="app_YOUR_APP_ID" data-api="https://firstusers-api.n31vfqjhge7aa.ap-south-1.cs.amazonlightsail.com" async></script>

data-app is your app id; without it the script does nothing. data-api tells it where to send events. The install step gives you this tag with both filled in.

2. Deploy and check

Open your deployed app once. The script sends a single “installed” ping. Back in FirstUsers, the install step turns green within 5 seconds and your app enters the queue.

3. If you use a Content Security Policy

Allow the script host and the API host. Without this the browser blocks the tag and the install check stays red.

Content-Security-Policy: script-src 'self' https://cdn.firstusers.aevrinlabs.com; connect-src 'self' https://firstusers-api.n31vfqjhge7aa.ap-south-1.cs.amazonlightsail.com

What it records

Only during a test session: console errors and warnings, failed requests (method, URL without the query string, status), clicks, route changes and a heartbeat with active time. Never input values, keystrokes, cookies, request or response bodies, or anything from password fields. The full list is on the privacy page.

What testers see

Only when a tester arrives with a session link does a small pill appear bottom-right with a timer and a Report button. Regular visitors see nothing and nothing is recorded about them. The pill lives in a Shadow DOM so your CSS and its CSS never touch.