Privacy

We hash sensitive identifiers before persistence.

Email addresses are stored as SHA-256 hashes in waitlist records.
Spotify account ids are hashed before lite capsule enforcement.
Telemetry payloads are validated against an allow-list of events.