Dedicated storage
Local development writes to a project-specific SQLite database and generated/ asset folders.
generated/mediaharvester_web_context.sqlite3
PRIVACY
RETENTION
LOGS
Privacy
Privacy policy aligned with the implemented hosted data flows, tenant isolation, export, deletion, retention and provider configuration.
API key handling
Generated database-backed API keys are hashed; raw generated key values are returned only once.
POST /v1/api-keys
Retention controls
Inspect tenant retention counts/policy, export machine-readable tenant data, or request tenant deletion subject to legal hold.
GET /v1/privacy/export
Privacy mode
Operational privacy controls
Enabled external providers are disclosed dynamically; API-key hashes and session secrets are excluded from tenant export.
Full engineering-aligned policy: docs/legal/PRIVACY_POLICY.md. Contracting entity/legal-basis fields require owner/counsel approval.