Privacy
Clear boundaries instead of hidden collection
This local MVP is designed so that the information needed to run the product does not quietly become behavioral targeting data.
Search URLs are deliberate
A shared Search URL contains its criteria and may remain in browser, clipboard and message history. Cross-origin referrers receive only the site origin.
Routine logs omit Search terms
Raw and canonical Search values are excluded from ordinary application telemetry under the verified local configuration.
Account email is not public profile data
Email supports sign-in, verification and recovery. Public identity is represented by the chosen Public Name.
Local MVP notice
The current environment uses a local test mailbox. A production launch still requires an approved provider, retention policy and operational evidence.