What gets masked
Masking happens on the server, inside the database write, so it cannot be bypassed by a modified client or a copied link.
- Phone numbers of seven digits or more, including spaced and dotted formats
- Email addresses
- Social profile links — Instagram, Snapchat, Telegram, WhatsApp, X and similar
- Handle patterns such as '@name' and 'snap: name'
