Content Security Policy

If your site sends a Content-Security-Policy header, add statsdot.com to two directives:

script-src 'self' https://statsdot.com;
connect-src 'self' https://statsdot.com;

script-src lets the browser load the script, connect-src lets it send visits to https://statsdot.com/api/collect. The live widget also needs connect-src for /api/live.