Account Lookup
Account status and storage usage only — journal content is never visible here, even to staff (spec §4.4).
Prompt Management
Edits here take effect immediately for anyone fetching /v1/modes — no app update needed. Past entries keep the prompt text as it was when they were recorded either way.
Ads
Targeting is platform + coarse geo only — never per-user (see docs/DECISION_LOG.md). Programmatic placements hand off to AdMob; internal placements serve house creatives below.
Global kill switch
Turns every ad off everywhere, instantly, regardless of per-placement settings. Security/compliance lever — no deploy needed.
Audit Log
Every request to /v1/admin/* — reads and writes alike — attributed to a real staff account, the automation/service token, or logged as an unauthenticated attempt. Most recent 200.