CS
Thanks Damiano, that’s really useful feedback. The canary idea is a good one: an upload only shows that the file left the browser, while a unique URL inside the PDF would show if anyone or anything opened it later, which is where deletion claims really get tested. Cutting the network after page load for the in-browser tools is also on the list for the next round, so the result is shown rather than just stated. We plan to repeat the test every six months and will add both. Agreed on the questions that matter most: how long files are kept, how fast they are deleted, and whether a result URL can be guessed without a login.