Account Lookup
Account status and storage usage only — journal content is never visible here, even to staff (spec §4.4).
Modes Management
Edits here take effect immediately for anyone fetching /v1/modes — no app update needed. Past entries keep the prompt text as it was when they were recorded either way.
Ads
Targeting is platform + coarse geo only — never per-user (see docs/DECISION_LOG.md). Programmatic placements hand off to AdMob; internal placements serve house creatives below.
Global kill switch
Turns every ad off everywhere, instantly, regardless of per-placement settings. Security/compliance lever — no deploy needed.
Monitoring
Pulled server-side from the backend's own /v1/admin/monitoring/summary — no external API token ever touches this page's client-side JS (see docs/DECISION_LOG.md's 2026-09-07 entry).
Splash Site
Password gate for the pre-launch marketing site at helloseaglass.com — keeps it out of SEO/AI crawlers until the business entity is set up and it's ready to go public. Checked fresh on every request by splash/server.js, no redeploy needed to flip it.
Password required
On: the whole site returns a browser password prompt until the right password is entered. Off: the site is fully public — flip this only when it's actually ready to launch.
Audit Log
Every request to /v1/admin/* — reads and writes alike — attributed to a real staff account, the automation/service token, or logged as an unauthenticated attempt. Most recent 200.