Diagnostic data should stay diagnostic.
Before you submit
Remove passwords, API keys, access tokens, personal data, and production secrets from logs and stack traces. DevFixes limits input length, but it cannot identify every secret automatically.
AI analysis
When an OpenAI key is configured, submitted diagnostic text is sent to the configured OpenAI model for analysis. Without a key, the application uses its local fingerprint engine.
Uploaded logs
File uploads use short-lived signed Cloudflare R2 URLs. Production operators should configure an R2 lifecycle rule to delete logs automatically after the retention period they publish to users.
Advertising and cookies
When advertising is enabled, Google AdSense may use cookies or similar technologies to serve and measure ads. The production operator is responsible for configuring the required consent platform and regional privacy controls before enabling personalized advertising.