Where demo visitors go, and when

Privacy: public visitor analytics remain anonymous — a session id is a random value generated in the browser, not an account. When a signed-in member uses the site, that activity is associated with their MAR account (by the server, from their sign-in — never from anything the browser claims) so member-area usage can be understood and supported; only their name is shown here, never their email. No IP address or precise location is collected. Data is not included in `db:seed`; running `db:reset` clears it along with the rest of the demo database.