Every account action is written to an append-only log that cannot be edited or deleted after the fact — by you or by staff.

• Every account action is written to a permanent, append-only record.
• Entries can never be edited or deleted after the fact — by you or by staff.
• This creates a reliable history for reviewing what happened on your account and when.