Strict no-log policy: we do not store IPs and redact addresses/memos from logs. No account, no email, no phone. See docs/PRIVACY.md.