Fixed
- Send Feedback no longer attaches raw application-log lines to the GitHub report it creates, and it respects your choice not to include the page snapshot. Feedback reports used to attach a tail of recent errors pulled from the application log — in hosted mode that log is shared across testers, so a report you sent could carry a stray line touching another tester's activity, and even on your own local install a log line could in principle contain something sensitive no automated scrub can fully guarantee to catch. That raw tail is no longer attached at all, in hosted mode or on your own local install — your report still includes your description plus safe, curated diagnostics (app version, OS, config presence — never values). Separately, when you decline to include the page's rendered snapshot on a "Report a display issue," the page's URL now stays out too — it follows the same opt-out as the snapshot instead of being sent anyway.
- Send Feedback no longer includes the server's data-directory path, and on hosted plans it no longer includes anyone else's collection stats. A privacy audit found two more issues in the same diagnostics block: it included a filesystem path that has no business leaving the server, and on hosted plans the collection-size numbers came from the whole service rather than your own account, so your report could show someone else's numbers. Diagnostics are now a fixed, named set of safe fields (app version, OS, embedding/LLM config presence, and your own collection count where available) — no paths, and no other tenant's data, ever.