Request logs

FlashAPI stores sanitized request and response details in private R2 for 30 days. Searchable metadata is indexed in PostgreSQL and can remain after those details expire.

The dashboard list shows metadata only: time, route, status, outcome, and whether details are available, expired, or unavailable. Opening a request fetches the stored envelope only after the server checks account ownership and the 30-day access deadline.

Authorization headers, cookies, API keys, tokens, and other configured secret fields are redacted before storage. Queue events used for indexing never include full request or response bodies.

Billing and wallet history are independent of request-log retention. A missing or expired capture does not change credits.