Privacy

This demo logs the path, status, timing, and user agent of requests so we can tell browsers, known AI crawlers, API clients, and MCP calls apart. The IP is truncated to a network prefix and stored only as a salted hash. Raw log rows are deleted after 30 days. Daily counts are kept. /health is not logged. The admin stats page shows those totals.

A mock checkout stores the name, email, and address you type, in a local SQLite file. The receipt page masks them and opens only with an unguessable link. Do not enter a real address. There is no account system and no sale of data, because there is no business here.