Privacy readiness for short-drama viewing

Discovery pages may use basic page-view, search, playback, favorite, and conversion events to understand which short-drama routes work.

Account and invite features should store only the data needed to authenticate users, bind invites, provide access, and prevent abuse.

Future payment flows should keep card or wallet credentials inside the selected payment provider and store only non-sensitive order, entitlement, refund, and audit records locally.

Operational logs should avoid secrets, full tokens, private credentials, and unnecessary personal data.