Security cookies, sessions, MFA checks, CSRF protection, and audit logs protect access to the app.

When you opt in, bounded usage events help improve dashboard quality without collecting form values, passwords, MFA codes, or secrets.

Full IP addresses are not stored; only minimized network and country metadata is retained.