Privacy

Basic handling guidance for this internal web surface.

This page is intentionally concise. The application is aimed at internal operational use, so the practical focus is on minimal collection, controlled access, and avoiding accidental exposure of diagnostic data.

What this site may expose

  • Request metadata such as headers, scheme, and user agent for debugging.
  • Authenticated identity claims when the current request is signed in.
  • Assembly and configuration-adjacent details useful during support work.

Expected handling

  • Use diagnostic pages only in trusted environments and for operational troubleshooting.
  • Do not capture or share screenshots that expose sensitive tokens, headers, or claim values.
  • Keep access controls and deployment environment settings aligned with internal-only usage.

Operational note

If this MVC surface is expanded for broader audiences, the privacy and retention policy should move from this summary page into a formal reviewed document with environment-specific controls.