diff --git a/website/astro.config.mjs b/website/astro.config.mjs
index 05a9700..00ea740 100644
--- a/website/astro.config.mjs
+++ b/website/astro.config.mjs
@@ -62,6 +62,10 @@ export default defineConfig({
 				// Website ID is public by design (it ships in every page). The script
 				// loads from the Umami host, which also becomes the data destination,
 				// so no `data-host-url` is needed.
+				//   - Served first-party under `umami.relplay.org` (a proxied CNAME to
+				//     the Umami server) rather than the server's own host: privacy
+				//     blockers (e.g. Brave Shields) block Umami only as a *third-party*
+				//     request, so a same-registrable-domain host is not flagged.
 				//   - data-domains: only run on the production apex, so the
 				//     `website.relplay.pages.dev` preview and `staging.relplay.org`
 				//     don't pollute the stats.
@@ -71,7 +75,7 @@ export default defineConfig({
 					tag: 'script',
 					attrs: {
 						defer: true,
-						src: 'https://umami.oliversturm.com/script.js',
+						src: 'https://umami.relplay.org/script.js',
 						'data-website-id': 'fd77cfa5-cffe-4fc8-addb-1c6d7b6d9939',
 						'data-domains': 'relplay.org',
 						'data-do-not-track': true,
diff --git a/website/src/content/docs/privacy.md b/website/src/content/docs/privacy.md
index 7fb5b27..9bbe959 100644
--- a/website/src/content/docs/privacy.md
+++ b/website/src/content/docs/privacy.md
@@ -11,7 +11,7 @@ visitors. We keep the analytics deliberately minimal.
 
 We measure aggregate usage with **[Umami](https://umami.is/)**, a
 privacy-friendly analytics tool that we **host ourselves** (on
-`umami.oliversturm.com`). Nothing is sent to a third-party advertising
+`umami.relplay.org`). Nothing is sent to a third-party advertising
 network.
 
 For each page view we record: