Privacy and redaction

Redact event data before logs, webhooks, and support reports.

Privacy and redaction

Dhal v0.11 enables privacy-first redaction by default.

{
  "observability": {
    "redaction": {
      "enabled": true,
      "ip": "mask",
      "identity": "hash",
      "userAgent": "full"
    }
  }
}

IP redaction modes

Value	Behavior
none	keep full IP
mask	mask part of the IP
hash	hash IP value
omit	remove IP field

Identity redaction modes

Value	Behavior
none	keep identity values
mask	mask identity values
hash	hash identity values
omit	remove identity fields

User agent

Value	Behavior
full	keep full user-agent
omit	remove user-agent

Support reports

dhal report uses redacted posture. Still review reports before sharing publicly.