Logging partial public keys could still pose a privacy risk. Consider using a hash or removing this debug information entirely, especially in production builds.

[silentius-satoshi]

Logging partial public keys could still pose a privacy risk. Consider using a hash or removing this debug information entirely, especially in production builds.

    userPubkeyHash: user?.pubkey ? crypto.createHash('sha256').update(user.pubkey).digest('hex') : undefined

Originally posted by @Copilot in #33 (comment)