What is logged

time of each request, the page or endpoint used, and the HTTP method and status
user-agent, referrer, and any HTTP message signature headers sent by the client
for MCP and A2A clients: the client name, version, and protocol version they declare
a keyed hash of the IP address (not the address itself), plus coarse network and country
the content of submitted requests, after removing obvious personal data and credentials

Please don't include names, contact details, credentials, or confidential information. Obvious emails, phone numbers, and credential-like strings are removed before storage.

Raw logs are kept for as long as this service runs, plus 90 days, then reduced to aggregates. The key used to hash IP addresses is destroyed when the service ends.

Submitted requests are never shown to other visitors. Callback URLs are stored but not called.