diff --git a/app/layout.tsx b/app/layout.tsx
index 366a4bd..e33f83e 100644
--- a/app/layout.tsx
+++ b/app/layout.tsx
@@ -35,13 +35,15 @@ export default function RootLayout({
 }>) {
   return (
     <html lang="en">
-      <body className={`${geistSans.variable} ${geistMono.variable}`}>
+      <head>
         <Script
           defer
           data-domain="hoerdle.elpatron.me"
           src="https://plausible.elpatron.me/js/script.js"
-          strategy="afterInteractive"
+          strategy="beforeInteractive"
         />
+      </head>
+      <body className={`${geistSans.variable} ${geistMono.variable}`}>
         {children}
         <InstallPrompt />
         <AppFooter />
diff --git a/next.config.ts b/next.config.ts
index 9b78294..f7907c8 100644
--- a/next.config.ts
+++ b/next.config.ts
@@ -15,6 +15,15 @@ const nextConfig: NextConfig = {
   },
   async headers() {
     return [
+      {
+        source: '/:path*',
+        headers: [
+          {
+            key: 'Content-Security-Policy',
+            value: "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://plausible.elpatron.me; connect-src 'self' https://plausible.elpatron.me;",
+          },
+        ],
+      },
       {
         source: '/uploads/:path*.mp3',
         headers: [
