Privacy

Production requests should process through a private backend and protected logs.

Frontend pages must never contain private backend logic, payment verification internals, or secret keys.