Collect less, keep less.

We use a daily HMAC fingerprint for click deduplication and do not persist raw IP addresses. Owner sessions expire and rotate. Payment and audit records are retained only for operational and legal obligations.