Privacy posture
Collect the minimum needed to explain a result.
Public audit reports retain short evidence excerpts and source URLs. The local implementation is not a production privacy notice.
Public audit data
Target URL, fetch metadata, minimal visible excerpts, normalized findings, and score inputs are used to build the report. Raw page bodies are not rendered into the application DOM.
Provider data
Live provider calls are disabled. Replay observations preserve prompts, citations, provider surface, timing, and a response digest without browser keys or consumer-interface automation.