@supersuit/suggest-a-change 0.2.2 → 0.2.3

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.2.3 (2026-10-26)
+
+- **An app can turn any built-in context item off.** `context: { items?, precise?, off: ContextKey[] }`, with keys `taps`, `pages`, `errors`, `time`, `language`, `device`, `screen`, `appearance`, `connection`, `age`, `account` (`CONTEXT_KEYS`, `contextOff`). An item off is never collected (the trail keeps nothing of it from the first mount and forgets what it had), never listed by the sheet, and never in the report or the issue; `device`, `screen` and `time` off drop the matching diagnostic too. `installContextListeners({ off })` and `collectContext({ off })` take the same list. Earned by a family app whose taps were a child's name, a visit or a medicine: it stripped taps on its server while the sheet still promised "your last taps".
+- **`data-private`.** A tap on an element marked `data-private`, or inside one, is kept only as "something private", and a button's `data-private` parts are left out of its label.
+- **The app's own note beside the list.** `words.text.destinationNote` renders under the what-goes list (or the one line), before Send, in `.sac-note`, never replacing the list, so an app that turns `destination()` on no longer loses its consent sentence.
+
 ## 0.2.2 (2026-10-26)
 
 - The pixel ratio in a report's context is rounded to two places (it read `1.600000023841858x` on a real Mac).

package/README.md

@@ -90,14 +90,18 @@ The four diagnostics are the app's version, the time, the screen size and the ph
 | Your last taps | the last 20, by what the button or link is called; never what was typed | so the fixer can repeat what you did |
 | Errors the page hit | the last 10 errors and unhandled rejections, message and first stack frame, no query strings | the error the app hit is often the fastest way to the cause |
 
-The trail (pages, taps, errors) is kept from the moment any of the module's screens first mounts (the entry, `<KeepSending>`, `<SuggestNews>`), in memory only, in small ring buffers. Never captured: an input's value, the text of anything someone types into (an editable region, a text, search or combo box; it is "a text field"), cookies, storage, query strings. A host that bundles two copies of the module still gets one trail and one set of listeners (the state sits on the global object under a registered symbol), and a reset never undoes a wrapper the host put on `history` after ours. `collectContext()` and `installContextListeners()` are exported from `"./client"` for a host that wants them elsewhere.
+The trail (pages, taps, errors) is kept from the moment any of the module's screens first mounts (the entry, `<KeepSending>`, `<SuggestNews>`), in memory only, in small ring buffers. Never captured: an input's value, the text of anything someone types into (an editable region, a text, search or combo box; it is "a text field"), the text of anything marked `data-private` or inside one (below), cookies, storage, query strings. A host that bundles two copies of the module still gets one trail and one set of listeners (the state sits on the global object under a registered symbol), and a reset never undoes a wrapper the host put on `history` after ours. `collectContext()` and `installContextListeners()` are exported from `"./client"` for a host that wants them elsewhere.
 
 - **The app's own context.** `context: async () => [{ label: "Plan", value: "Pro, yearly", why: "some features only exist on Pro" }]` adds anything app-specific; an item without a `why` is dropped. Or `context: { items, precise: true }` to also ask the browser for a precise location (its permission prompt); without that, location is only the time zone, plus roughly where from the receiver (below).
+- **Turning items off.** `context: { items?, precise?, off: ["taps", "pages"] }` turns any built-in item off, for an app whose screens would carry what it must not share (a family app whose buttons are a child's name, a visit or a medicine). The keys are `taps`, `pages`, `errors`, `time`, `language`, `device`, `screen`, `appearance`, `connection`, `age` and `account` (`ContextKey`, all of them in `CONTEXT_KEYS`). An item off is never collected (from the first mount, the trail keeps nothing of it and forgets what it had), never listed on the sheet, and never in the report or the issue; `device`, `screen` and `time` off also drop the matching diagnostic, so the one line does not promise it either. It lives on the `context` adapter, beside `precise`, because it answers the same question (what context goes) and needs no new adapter. The parity test holds the sheet's list and the composed issue to each other with items off.
+- **`data-private`, per element.** A tap on an element marked `data-private`, or anything inside one, is kept only as "something private"; a button with a `data-private` part (`Visit for <span data-private>Mia</span>`) is kept by its other text ("Visit for"). Mark wherever a person's details render as tappable text, when the rest of the trail is still worth keeping. `data-private="false"` unmarks.
 - **A way to reach them.** `contact: async () => ({ email, phone, handle })` gives what the app already knows, so whoever fixes it can say thanks or ask a question. It goes by default to a private repo and is off, with the reason ("this repo is public, so anyone could read it"), for a public one. It travels as `who.contact`, the one place a report may carry an email. The receiving side treats it as the person saying "share it" and takes the address itself from the host (the server half's `contactOf(member)`, a relay's `identity()`), so a phone can never put someone else's address on an issue.
 
 The issue carries it all in a "Context (shared so this can be fixed)" table of what, value and why (in place of the About line), the trail in collapsible blocks, and a "Reach them" section with `mailto:` and `tel:` links "To thank them or ask a follow-up question". When the body would pass GitHub's limit, the trail is cut first (oldest taps, then pages, then errors), then the transcript.
 
-**Where it files.** With the optional `destination()` adapter, answering `{ repo, public, account, attaches, name? }`, that line becomes the list of exactly what the issue will carry ("your words · your voice note and its transcript · 2 screenshots, saved to the suggestion-attachments branch of acme/notes · this screen (Photos, /photos) · notes 1.2.3 · iPhone, 390x844 · the time · your name, Alex Kim"), the repo it files on, who can read it there (a public repo says so in `--sac-danger`), and whose GitHub account files it. The list follows the draft as things are added or removed, and it is built by `whatGoes` from `./github`, the same pieces `composeIssue` writes the body from, so the sheet and the issue cannot drift. `attaches: false` says files wait until the repo can take them. With `via: "relay"` (and `relayApp`, the relay's app name as people see it) the account line says the issue is opened by that app and whose it is ("Opened by the Supersuit Suggestions app on GitHub, which says it came from Alex Kim."), since the filer's own account is not what opens it. Sending is the consent. Without the adapter (or when it answers null) the sheet keeps the one line. My suggestions and the detail view link the issue a report became ("Issue #7"); a member who cannot read the repo still sees the number and the state.
+**Where it files.** With the optional `destination()` adapter, answering `{ repo, public, account, attaches, name? }`, that line becomes the list of exactly what the issue will carry ("your words · your voice note and its transcript · 2 screenshots, saved to the suggestion-attachments branch of acme/notes · this screen (Photos, /photos) · notes 1.2.3 · iPhone, 390x844 · the time · your name, Alex Kim"), the repo it files on, who can read it there (a public repo says so in `--sac-danger`), and whose GitHub account files it. The list follows the draft as things are added or removed, and it is built by `whatGoes` from `./github`, the same pieces `composeIssue` writes the body from, so the sheet and the issue cannot drift. `attaches: false` says files wait until the repo can take them. With `via: "relay"` (and `relayApp`, the relay's app name as people see it) the account line says the issue is opened by that app and whose it is ("Opened by the Supersuit Suggestions app on GitHub, which says it came from Alex Kim."), since the filer's own account is not what opens it. Sending is the consent. Without the adapter (or when it answers null) the sheet keeps the one line.
+
+**The app's own note.** `words.text.destinationNote` is a sentence or two only the app can say about where a report goes and what it carries ("The people who fix this are outside your family. A photo or video of your child goes too, and a video keeps where it was filmed."). The sheet shows it under the list (or under the one line, without a destination), before Send, in the module's styling (`.sac-note`), and never instead of the list. It is a word rather than a field of `destination()` because every word a person reads lives in `words.text`, where an app already keeps its consent sentence (`goesTo`, `includes`) and translates it, and because it has to show whether or not `destination()` answers: an app that turns `destination()` on keeps its note. My suggestions and the detail view link the issue a report became ("Issue #7"); a member who cannot read the repo still sees the number and the state.
 
 **Identity.** Every screen asks `adapters.identity()` when it mounts, whenever it is handed a different `adapters` object, and whenever the host calls `refreshIdentity()` (exported from `"./client"`; call it after a sign-in, sign-out or account switch). When the account differs, the old account's rows leave the screen and its waiting reports stay on the phone, to be sent only while that account is signed in; every send re-confirms the account first. Keep `adapters` stable where you can; a parent that rebuilds it every render is safe, only slower (one `identity()` call per render).
 

package/dist/client/adapters.d.ts

@@ -5,7 +5,7 @@ import type { StoreAdapter } from './reports.ts';
 import type { startTake } from './recorder.ts';
 import type { Words } from './words.ts';
 import type { Destination } from '../github/compose.ts';
-import type { AppContextItem } from './context.ts';
+import type { AppContextItem, ContextKey } from './context.ts';
 export type Role = 'operator' | 'member' | 'maintainer';
 export type Kind = 'change' | 'broken' | 'feedback';
 /** `name` (or `username`) is how the person is called in the app; it goes in the context, and the account never does. */
@@ -113,10 +113,12 @@ export interface Adapters {
      *  (the same list the issue is written from); null or absent keeps the one-line note. */
     destination?(): Promise<SheetDestination | null>;
     /** Anything app-specific that would help fix it, each with why it is shared (an item without a why is dropped). Or
-     *  `{ items?, precise? }`, where `precise: true` also asks the browser for the person's location (its permission prompt). */
+     *  `{ items?, precise?, off? }`, where `precise: true` also asks the browser for the person's location (its permission
+     *  prompt) and `off` turns built-in items off: an item off is never collected, never listed and never in the issue. */
     context?: (() => Promise<AppContextItem[]>) | {
         items?(): Promise<AppContextItem[]>;
         precise?: boolean;
+        off?: readonly ContextKey[];
     };
     /** How to reach the sender, from what the app already knows. Shared by default to a private repo, off for a public one. */
     contact?(): Promise<Contact | null>;

package/dist/client/context.d.ts

@@ -29,10 +29,17 @@ export interface AppContextItem {
     value: string;
     why: string;
 }
+/** Every built-in item an app can turn off. `pages`, `taps` and `errors` are the trail; the rest are the items' keys. */
+export declare const CONTEXT_KEYS: readonly ['taps', 'pages', 'errors', 'time', 'language', 'device', 'screen', 'appearance', 'connection', 'age', 'account'];
+export type ContextKey = typeof CONTEXT_KEYS[number];
 /** A URL or path with no query and no hash, wherever it appears in a piece of text. */
 export declare const withoutQueries: (s: string) => string;
-/** Starts keeping the trail. Idempotent: every screen of the module calls it on mount, and it installs once. */
-export declare function installContextListeners(): void;
+/** Starts keeping the trail. Idempotent: every screen of the module calls it on mount, and it installs once. `off`
+ *  turns trail items off for the page (`taps`, `pages`, `errors`): from then on nothing of them is kept, and what was
+ *  kept is forgotten. */
+export declare function installContextListeners(o?: {
+    off?: readonly string[];
+}): void;
 /** Stops keeping the trail and forgets it (tests, and a host that signs someone out). */
 export declare function resetContext(): void;
 /** A copy of the trail as it stands. */
@@ -56,6 +63,10 @@ export interface CollectOptions {
     /** A user agent to read instead of the browser's (tests). */
     userAgent?: string;
     now?: () => number;
+    /** Built-in items the app turned off: never collected, so never listed and never sent. */
+    off?: readonly ContextKey[];
 }
+/** The `off` list from the `context` adapter, whatever form it takes; unknown keys are ignored. */
+export declare function contextOff(c: unknown): ContextKey[];
 /** Everything the module knows that would help fix it, each item with why it is shared, and the trail. */
 export declare function collectContext(o?: CollectOptions): Promise<ReportContext>;

package/dist/client/context.js

@@ -1,8 +1,12 @@
+/** Every built-in item an app can turn off. `pages`, `taps` and `errors` are the trail; the rest are the items' keys. */
+export const CONTEXT_KEYS = ['taps', 'pages', 'errors', 'time', 'language', 'device', 'screen', 'appearance', 'connection', 'age', 'account'];
 const MAX = { routes: 10, taps: 20, errors: 10, items: 40 };
 const SHARED = Symbol.for('@supersuit/suggest-a-change/context');
 const shared = globalThis[SHARED]
     ?? (globalThis[SHARED] = { trail: { routes: [], taps: [], errors: [] }, installedAt: 0, undo: null });
 const trail = shared.trail;
+// What the app turned off, for the page: once off, the listeners keep nothing of it until a reset.
+const offSet = () => (shared.off ??= new Set());
 const clip = (s, max) => (s.length <= max ? s : `${s.slice(0, max - 1).trimEnd()}…`);
 const iso = () => new Date().toISOString();
 const push = (list, x, max) => { list.push(x); if (list.length > max)
@@ -35,17 +39,35 @@ const routeOf = (href) => {
     return path.split('/').map((seg) => (seg && idLike(seg) ? ':id' : seg)).join('/');
 };
 function recordRoute() {
-    if (typeof location === 'undefined')
+    if (typeof location === 'undefined' || offSet().has('pages'))
         return;
     const route = routeOf(location.href);
     if (trail.routes.at(-1)?.route === route)
         return;
     push(trail.routes, { route: clip(route, 300), at: iso() }, MAX.routes);
 }
-/** What a tapped thing is called: its label or its text, never what was typed into it. */
+const PRIVATE = '[data-private]:not([data-private="false"])';
+/** An element's text with every `data-private` part left out. */
+function publicText(el) {
+    let out = '';
+    const walk = (n) => {
+        if (n.nodeType === 3)
+            out += n.textContent ?? '';
+        else if (n instanceof Element && !n.matches(PRIVATE))
+            n.childNodes.forEach(walk);
+        else if (!(n instanceof Element))
+            n.childNodes.forEach(walk);
+    };
+    el.childNodes.forEach(walk);
+    return out;
+}
+/** What a tapped thing is called: its label or its text, never what was typed into it, and never the text of
+ *  anything marked `data-private` (a child's name on a button): a tap there is only "something private". */
 function labelOf(target) {
     if (!(target instanceof Element))
         return null;
+    if (target.closest(PRIVATE))
+        return 'something private';
     // Anything someone types into is "a text field", by its own label at most and never its text: an editable region,
     // a text, search or combo box, wherever inside it the tap landed.
     const typing = target.closest('[contenteditable]:not([contenteditable="false"]), [role="textbox"], [role="searchbox"], [role="combobox"]');
@@ -68,7 +90,9 @@ function labelOf(target) {
     }
     if (aria)
         return clip(aria, 60);
-    const text = (el.textContent ?? '').replace(/\s+/g, ' ').trim();
+    if (el.closest(PRIVATE))
+        return 'something private';
+    const text = publicText(el).replace(/\s+/g, ' ').trim();
     if (text)
         return clip(text, 60);
     const title = el.getAttribute('title')?.trim();
@@ -82,17 +106,35 @@ const firstFrame = (stack) => {
 };
 const messageOf = (x) => (x instanceof Error ? x.message : typeof x === 'string' ? x : x === undefined ? '' : typeof x === 'number' || typeof x === 'boolean' ? String(x) : '[object]');
 function recordError(message, stack) {
+    if (offSet().has('errors'))
+        return;
     push(trail.errors, { message: clip(withoutQueries(message || 'An error with no message'), 300), ...(firstFrame(stack) ? { frame: firstFrame(stack) } : {}), at: iso() }, MAX.errors);
 }
-/** Starts keeping the trail. Idempotent: every screen of the module calls it on mount, and it installs once. */
-export function installContextListeners() {
+/** Empties the parts of the trail an app turned off. */
+function forgetOff() {
+    const off = offSet();
+    if (off.has('pages'))
+        trail.routes.length = 0;
+    if (off.has('taps'))
+        trail.taps.length = 0;
+    if (off.has('errors'))
+        trail.errors.length = 0;
+}
+/** Starts keeping the trail. Idempotent: every screen of the module calls it on mount, and it installs once. `off`
+ *  turns trail items off for the page (`taps`, `pages`, `errors`): from then on nothing of them is kept, and what was
+ *  kept is forgotten. */
+export function installContextListeners(o = {}) {
+    for (const k of o.off ?? [])
+        offSet().add(k);
+    forgetOff();
     if (shared.undo || typeof window === 'undefined' || typeof document === 'undefined')
         return;
     shared.installedAt = Date.now();
     // A wrapper a host put on top of ours may outlive a reset; once reset, ours only passes the call through.
     let live = true;
     recordRoute();
-    const onClick = (e) => { const l = labelOf(e.target); if (l)
+    const onClick = (e) => { if (offSet().has('taps'))
+        return; const l = labelOf(e.target); if (l)
         push(trail.taps, { label: l, at: iso() }, MAX.taps); };
     const onError = (e) => { const ev = e; recordError(ev.message || messageOf(ev.error), ev.error?.stack); };
     const onRejection = (e) => { const reason = e.reason; recordError(`Unhandled rejection: ${messageOf(reason)}`, reason?.stack); };
@@ -139,6 +181,7 @@ export function installContextListeners() {
 export function resetContext() {
     shared.undo?.();
     shared.undo = null;
+    offSet().clear();
     trail.routes.length = 0;
     trail.taps.length = 0;
     trail.errors.length = 0;
@@ -225,18 +268,25 @@ const media = (q) => { try {
 catch {
     return false;
 } };
+/** The `off` list from the `context` adapter, whatever form it takes; unknown keys are ignored. */
+export function contextOff(c) {
+    const off = c && typeof c === 'object' ? c.off : undefined;
+    return Array.isArray(off) ? off.filter((k) => CONTEXT_KEYS.includes(k)) : [];
+}
 /** Everything the module knows that would help fix it, each item with why it is shared, and the trail. */
 export async function collectContext(o = {}) {
     const now = new Date(o.now?.() ?? Date.now());
     const items = [];
-    const add = (key, label, value, why) => { if (value)
+    const off = new Set(o.off ?? []);
+    const add = (key, label, value, why) => { if (off.has(key))
+        return; if (value)
         items.push({ key, label: clip(label, 80), value: clip(value, 500), why: clip(why, 200) }); };
     const who = o.identity;
     add('account', 'Your name in the app', who?.name || who?.username, 'so whoever fixes it knows who to thank, and can look at your account if the problem is in it');
     add('time', 'Your local time', timeWords(now), 'so the fixer can line it up with what the app logged at that moment');
     const langs = typeof navigator === 'undefined' ? [] : (navigator.languages?.length ? [...navigator.languages] : navigator.language ? [navigator.language] : []);
     add('language', 'Your languages', langs.join(', '), 'some problems only happen in one language or date format');
-    add('device', 'Your device', await deviceWords(o.userAgent), 'so the fixer can try it on the same kind of device and browser');
+    add('device', 'Your device', off.has('device') ? '' : await deviceWords(o.userAgent), 'so the fixer can try it on the same kind of device and browser');
     if (typeof window !== 'undefined') {
         const s = typeof screen === 'undefined' ? null : screen;
         add('screen', 'Screen and window', `${s ? `${s.width}x${s.height} screen, ` : ''}${window.innerWidth}x${window.innerHeight} window, ${Math.round((window.devicePixelRatio || 1) * 100) / 100}x pixels`, 'how things are laid out depends on the size of the screen and window');
@@ -275,5 +325,6 @@ export async function collectContext(o = {}) {
         }
         catch { /* the app's own context failing never blocks a suggestion */ }
     }
-    return { items: items.slice(0, MAX.items), ...contextTrail() };
+    const t = contextTrail();
+    return { items: items.slice(0, MAX.items), routes: off.has('pages') ? [] : t.routes, taps: off.has('taps') ? [] : t.taps, errors: off.has('errors') ? [] : t.errors };
 }

package/dist/client/index.d.ts

@@ -15,5 +15,5 @@ export * from './mine.tsx';
 export { seenStatuses, markSeen, moved, onSeen, seenKey, type Seen } from './seen.ts';
 export * from './detail.tsx';
 export { refreshIdentity } from './runtime.ts';
-export { collectContext, installContextListeners, contextTrail, resetContext, parseUserAgent, withoutQueries } from './context.ts';
-export type { ContextItem, AppContextItem, ReportContext, Trail, CollectOptions } from './context.ts';
+export { collectContext, installContextListeners, contextTrail, resetContext, parseUserAgent, withoutQueries, contextOff, CONTEXT_KEYS } from './context.ts';
+export type { ContextItem, AppContextItem, ReportContext, Trail, CollectOptions, ContextKey } from './context.ts';

package/dist/client/index.js

@@ -15,4 +15,4 @@ export * from './mine.js';
 export { seenStatuses, markSeen, moved, onSeen, seenKey } from './seen.js';
 export * from './detail.js';
 export { refreshIdentity } from './runtime.js';
-export { collectContext, installContextListeners, contextTrail, resetContext, parseUserAgent, withoutQueries } from './context.js';
+export { collectContext, installContextListeners, contextTrail, resetContext, parseUserAgent, withoutQueries, contextOff, CONTEXT_KEYS } from './context.js';

package/dist/client/runtime.js

@@ -6,7 +6,7 @@
 // is sent only while that person is signed in. "Received" is derived from the outbox: a report has landed
 // when none of its writes is left there, because a write leaves only after the adapter said `done`.
 import { useEffect, useRef, useState } from 'react';
-import { installContextListeners } from './context.js';
+import { contextOff, installContextListeners } from './context.js';
 import { draftKey } from './drafts.js';
 import { openStore } from './idb.js';
 import { makeOutbox } from './outbox.js';
@@ -172,7 +172,9 @@ export function useRuntime(adapters) {
     const current = useRef({ account: null, release: () => { } });
     const alive = useRef(true);
     // Every screen of the module mounts this, so the trail (pages, taps, errors) starts with the first one; it installs once.
-    useEffect(() => { installContextListeners(); }, []);
+    // What the app turned off is never kept, from the first mount on.
+    const off = contextOff(adapters.context).join(',');
+    useEffect(() => { installContextListeners({ off: off ? off.split(',') : [] }); }, [off]);
     useEffect(() => { alive.current = true; return () => { alive.current = false; current.current.release(); current.current = { account: null, release: () => { } }; }; }, []);
     useEffect(() => { const l = () => setSignal((n) => n + 1); identityListeners.add(l); return () => { identityListeners.delete(l); }; }, []);
     useEffect(() => { if (state.rt)

package/dist/client/sheet.js

@@ -9,7 +9,7 @@ import { useCallback, useEffect, useId, useMemo, useRef, useState } from 'react'
 import { isAcceptedMedia, sanitizeRoute, typeForFile, validateReport } from '../contract.mjs';
 import { destinationWords, whatGoes } from '../github/compose.js';
 import { validContact } from '../contract.mjs';
-import { collectContext } from './context.js';
+import { collectContext, contextOff } from './context.js';
 import { useDialog } from './dialog.js';
 import { DefaultField } from './default-field.js';
 import { draftKey, loadDraft, saveDraft } from './drafts.js';
@@ -95,10 +95,13 @@ export function SuggestSheet({ adapters, where, onClose, initial }) {
             setDest(null); });
         return () => { live = false; };
     }, [adapters]);
+    // What the app turned off, as the list's keys: never collected, never listed, never sent.
+    const off = useMemo(() => contextOff(adapters.context), [adapters]);
+    const offPieces = useMemo(() => new Set(off.map((k) => (k === 'pages' ? 'routes' : k === 'taps' || k === 'errors' ? k : `ctx:${k}`))), [off]);
     const contextOptions = useCallback(() => {
         const c = adapters.context;
-        return typeof c === 'function' ? { extra: c, precise: false } : { extra: c?.items ? () => c.items() : undefined, precise: Boolean(c?.precise) };
-    }, [adapters]);
+        return typeof c === 'function' ? { extra: c, precise: false, off } : { extra: c?.items ? () => c.items() : undefined, precise: Boolean(c?.precise), off };
+    }, [adapters, off]);
     const gather = useCallback(() => collectContext({ identity: who ?? null, where, about: adapters.about, ...contextOptions(), ...(adapters.phone?.now ? { now: adapters.phone.now } : {}) }), [who, where, adapters, contextOptions]);
     useEffect(() => {
         if (!who)
@@ -301,7 +304,9 @@ export function SuggestSheet({ adapters, where, onClose, initial }) {
         { name: 'at', label: S.diagAt, value: new Date(adapters.phone?.now?.() ?? Date.now()).toISOString() },
         { name: 'screen', label: S.diagScreen, value: screenSize() },
         { name: 'device', label: S.diagDevice, value: adapters.device ? adapters.device() : phoneType() },
-    ].filter((d) => Boolean(d.value));
+    ].filter((d) => Boolean(d.value))
+        // A diagnostic whose context item the app turned off is not said, listed or sent either.
+        .filter((d) => !offPieces.has({ device: 'ctx:device', screen: 'ctx:screen', at: 'ctx:time' }[d.name] ?? ''));
     const lineParts = [`this screen (${where.screen}, ${sanitizeRoute(where.route)})`, ...avail.map((d) => d.label)];
     const summary = `${S.goesTo(adapters.words.owner)} ${S.includes(lineParts)}`;
     // With a destination, the one line becomes the list of exactly what the issue will carry, built by the same function
@@ -316,7 +321,7 @@ export function SuggestSheet({ adapters, where, onClose, initial }) {
         ...(ctx ? { context: ctx } : {}),
         ...(contact ? { who: { contact } } : {}),
     }, dest ?? { repo: '', public: false, account: '', attaches: true });
-    const isOn = (key, fallback = true) => choice[key] ?? rows.find((r) => r.key === key)?.on ?? fallback;
+    const isOn = (key, fallback = true) => !offPieces.has(key) && (choice[key] ?? rows.find((r) => r.key === key)?.on ?? fallback);
     const goes = dest ? rows : null;
     const destWords = dest ? destinationWords(dest) : null;
     const optionalRow = (g) => (_jsx("li", { "data-goes": g.key, className: "sac-goes-opt", children: _jsxs("label", { children: [_jsx("input", { type: "checkbox", checked: isOn(g.key), onChange: (e) => setChoice((c) => ({ ...c, [g.key]: e.target.checked })) }), ' ', _jsx("span", { className: "sac-goes-label", children: g.text }), g.value ? _jsxs(_Fragment, { children: [": ", _jsx("span", { className: "sac-goes-value", children: g.value })] }) : null, ' ', _jsxs("span", { className: "sac-muted sac-goes-why", children: ["(", g.why, g.reason ? `; off by default because ${g.reason}` : '', ")"] })] }) }, g.key));
@@ -394,5 +399,5 @@ export function SuggestSheet({ adapters, where, onClose, initial }) {
     return (_jsx("div", { className: "sac-backdrop", "data-suggest-sheet": "", children: _jsxs("div", { ref: box, className: "sac-sheet", role: "dialog", "aria-modal": "true", "aria-labelledby": titleId, tabIndex: -1, children: [_jsxs("header", { className: "sac-header", children: [_jsx("h2", { id: titleId, className: "sac-title", children: S.sheetTitle }), onClose ? _jsx("button", { type: "button", className: "sac-button sac-close", onClick: onClose, children: S.close }) : null] }), _jsx("div", { className: "sac-sr", "data-sac-live": "", role: "status", "aria-live": "polite", "aria-atomic": "true", children: announce }), who === undefined ? _jsx("p", { children: S.loading }) : who === null ? _jsx("p", { role: "alert", children: S.signedOut }) : !rt ? _jsx("p", { children: S.loading }) : sent ? (_jsxs("div", { className: "sac-sent", children: [_jsx(Receipt, { adapters: adapters, reportId: sent.id, quiet: true, onLine: setAnnounce }), sent.files.length ? (_jsx("ul", { className: "sac-list", "aria-label": S.attachmentsLabel, children: sent.files.map((f) => {
                                 const p = rt.part(sent.id, f.file);
                                 return (_jsxs("li", { className: "sac-item", "data-attachment-state": p.state, children: [_jsxs("span", { className: "sac-item-name", children: [f.name, f.bytes ? `, ${sizeWords(f.bytes)}` : ''] }), _jsxs("span", { className: "sac-item-state", children: [p.state === 'sending' ? _jsx("progress", { "aria-label": `${S.sending} ${f.name}` }) : null, p.state === 'waiting' ? S.waitingToSend : p.state === 'sending' ? S.sending : p.state === 'sent' ? S.sentWord : S.didNotSend(p.reason ?? '')] }), p.state === 'failed' ? _jsx("button", { type: "button", className: "sac-button", onClick: () => void rt.retry(sent.id), children: S.retry }) : null] }, f.file));
-                            }) })) : null, onClose ? _jsx("button", { type: "button", className: "sac-button sac-primary", onClick: onClose, children: S.done }) : null] })) : (_jsxs("form", { className: "sac-form", onSubmit: (e) => { e.preventDefault(); void send(); }, children: [_jsxs("div", { className: "sac-kind", children: [_jsx("label", { htmlFor: `${titleId}-kind`, children: S.kindLegend }), _jsx("select", { id: `${titleId}-kind`, className: "sac-select", value: kind, onChange: (e) => setKind(e.target.value), children: kinds.map((k) => _jsx("option", { value: k.id, children: k.label }, k.id)) })] }), _jsxs("fieldset", { className: "sac-group sac-sayit", children: [_jsx("legend", { children: S.sayItLegend }), fieldFor('words', S.sayItLabel, words, setWords, { placeholder: kind === 'broken' ? S.sayItPlaceholderBroken : kind === 'feedback' ? S.sayItPlaceholderFeedback : S.sayItPlaceholder }), voice.length ? (_jsx("ul", { className: "sac-list", "aria-label": S.voiceNotesLabel, children: voice.map((v, i) => (_jsxs("li", { className: "sac-item", children: [_jsx("span", { className: "sac-item-name", children: S.voiceNote(i + 1, lengthWords(v.ms)) }), _jsx("button", { type: "button", className: "sac-button", "aria-label": `${S.remove} ${S.voiceNote(i + 1, lengthWords(v.ms))}`, onClick: () => void removeVoice(v), children: S.remove })] }, v.key))) })) : null] }), _jsxs("fieldset", { className: "sac-group", children: [_jsx("legend", { children: S.showItLegend }), _jsxs("div", { className: "sac-actions", children: [_jsx("button", { type: "button", className: "sac-button", onClick: () => fileInput.current?.click(), children: S.addImages }), _jsx("button", { type: "button", className: "sac-button", onClick: () => videoInput.current?.click(), children: S.addVideo }), adapters.snapshot ? _jsx("button", { type: "button", className: "sac-button", onClick: () => void takeScreenshot(), children: S.takeScreenshot }) : null] }), _jsx("input", { ref: fileInput, type: "file", accept: "image/*", multiple: true, hidden: true, "aria-label": S.addImages, "data-sac-images": "", onChange: (e) => { const f = [...(e.target.files ?? [])]; e.target.value = ''; void addMedia(f, 'image'); } }), _jsx("input", { ref: videoInput, type: "file", accept: "video/*", hidden: true, "aria-label": S.addVideo, "data-sac-video": "", onChange: (e) => { const f = [...(e.target.files ?? [])]; e.target.value = ''; void addMedia(f, 'video'); } }), media.length ? (_jsx("ul", { className: "sac-list", "aria-label": S.attachmentsLabel, children: media.map((m) => (_jsxs("li", { className: "sac-item", children: [_jsxs("span", { className: "sac-item-name", children: [m.name, ", ", sizeWords(m.bytes)] }), _jsx("button", { type: "button", className: "sac-button", "aria-label": `${S.remove} ${m.name}`, onClick: () => void removeMedia(m), children: S.remove })] }, m.key))) })) : null] }), goes && destWords ? (_jsxs("div", { className: "sac-goes sac-fyi", "data-sac-goes": "", children: [_jsxs("p", { className: "sac-goes-head", children: [_jsx("strong", { children: destWords.headline }), ' (', _jsx("span", { className: destWords.danger ? 'sac-danger' : 'sac-muted', children: destWords.privacy }), ")"] }), _jsx("p", { className: "sac-muted", children: "It will carry:" }), _jsx("ul", { className: "sac-goes-list", children: goes.filter((g) => !g.optional).map((g) => _jsx("li", { "data-goes": g.key, children: g.text }, g.key)) }), goes.some((g) => g.optional) ? _jsx("ul", { className: "sac-goes-opts", "aria-label": S.contextLegend, children: goes.filter((g) => g.optional).map(optionalRow) }) : null, _jsx("p", { className: "sac-muted", children: destWords.account })] })) : (_jsxs("div", { className: "sac-fyi", children: [_jsx("p", { className: "sac-muted sac-fyi", "data-sac-summary": "", children: summary }), rows.some((g) => g.optional) ? _jsx("ul", { className: "sac-goes-opts", "aria-label": S.contextLegend, children: rows.filter((g) => g.optional).map(optionalRow) }) : null] })), error ? _jsx("p", { role: "alert", className: "sac-error", children: error }) : null, _jsxs("div", { className: "sac-actions", children: [_jsx("button", { type: "submit", className: "sac-button sac-primary", disabled: !hasAnything, "aria-describedby": hasAnything ? undefined : `${titleId}-hint`, children: S.send }), hasAnything ? null : _jsx("span", { id: `${titleId}-hint`, className: "sac-muted", children: S.sendHint })] })] })), _jsx(Toasts, {})] }) }));
+                            }) })) : null, onClose ? _jsx("button", { type: "button", className: "sac-button sac-primary", onClick: onClose, children: S.done }) : null] })) : (_jsxs("form", { className: "sac-form", onSubmit: (e) => { e.preventDefault(); void send(); }, children: [_jsxs("div", { className: "sac-kind", children: [_jsx("label", { htmlFor: `${titleId}-kind`, children: S.kindLegend }), _jsx("select", { id: `${titleId}-kind`, className: "sac-select", value: kind, onChange: (e) => setKind(e.target.value), children: kinds.map((k) => _jsx("option", { value: k.id, children: k.label }, k.id)) })] }), _jsxs("fieldset", { className: "sac-group sac-sayit", children: [_jsx("legend", { children: S.sayItLegend }), fieldFor('words', S.sayItLabel, words, setWords, { placeholder: kind === 'broken' ? S.sayItPlaceholderBroken : kind === 'feedback' ? S.sayItPlaceholderFeedback : S.sayItPlaceholder }), voice.length ? (_jsx("ul", { className: "sac-list", "aria-label": S.voiceNotesLabel, children: voice.map((v, i) => (_jsxs("li", { className: "sac-item", children: [_jsx("span", { className: "sac-item-name", children: S.voiceNote(i + 1, lengthWords(v.ms)) }), _jsx("button", { type: "button", className: "sac-button", "aria-label": `${S.remove} ${S.voiceNote(i + 1, lengthWords(v.ms))}`, onClick: () => void removeVoice(v), children: S.remove })] }, v.key))) })) : null] }), _jsxs("fieldset", { className: "sac-group", children: [_jsx("legend", { children: S.showItLegend }), _jsxs("div", { className: "sac-actions", children: [_jsx("button", { type: "button", className: "sac-button", onClick: () => fileInput.current?.click(), children: S.addImages }), _jsx("button", { type: "button", className: "sac-button", onClick: () => videoInput.current?.click(), children: S.addVideo }), adapters.snapshot ? _jsx("button", { type: "button", className: "sac-button", onClick: () => void takeScreenshot(), children: S.takeScreenshot }) : null] }), _jsx("input", { ref: fileInput, type: "file", accept: "image/*", multiple: true, hidden: true, "aria-label": S.addImages, "data-sac-images": "", onChange: (e) => { const f = [...(e.target.files ?? [])]; e.target.value = ''; void addMedia(f, 'image'); } }), _jsx("input", { ref: videoInput, type: "file", accept: "video/*", hidden: true, "aria-label": S.addVideo, "data-sac-video": "", onChange: (e) => { const f = [...(e.target.files ?? [])]; e.target.value = ''; void addMedia(f, 'video'); } }), media.length ? (_jsx("ul", { className: "sac-list", "aria-label": S.attachmentsLabel, children: media.map((m) => (_jsxs("li", { className: "sac-item", children: [_jsxs("span", { className: "sac-item-name", children: [m.name, ", ", sizeWords(m.bytes)] }), _jsx("button", { type: "button", className: "sac-button", "aria-label": `${S.remove} ${m.name}`, onClick: () => void removeMedia(m), children: S.remove })] }, m.key))) })) : null] }), goes && destWords ? (_jsxs("div", { className: "sac-goes sac-fyi", "data-sac-goes": "", children: [_jsxs("p", { className: "sac-goes-head", children: [_jsx("strong", { children: destWords.headline }), ' (', _jsx("span", { className: destWords.danger ? 'sac-danger' : 'sac-muted', children: destWords.privacy }), ")"] }), _jsx("p", { className: "sac-muted", children: "It will carry:" }), _jsx("ul", { className: "sac-goes-list", children: goes.filter((g) => !g.optional).map((g) => _jsx("li", { "data-goes": g.key, children: g.text }, g.key)) }), goes.some((g) => g.optional) ? _jsx("ul", { className: "sac-goes-opts", "aria-label": S.contextLegend, children: goes.filter((g) => g.optional).map(optionalRow) }) : null, _jsx("p", { className: "sac-muted", children: destWords.account })] })) : (_jsxs("div", { className: "sac-fyi", children: [_jsx("p", { className: "sac-muted sac-fyi", "data-sac-summary": "", children: summary }), rows.some((g) => g.optional) ? _jsx("ul", { className: "sac-goes-opts", "aria-label": S.contextLegend, children: rows.filter((g) => g.optional).map(optionalRow) }) : null] })), S.destinationNote ? _jsx("p", { className: "sac-note", "data-sac-note": "", children: S.destinationNote }) : null, error ? _jsx("p", { role: "alert", className: "sac-error", children: error }) : null, _jsxs("div", { className: "sac-actions", children: [_jsx("button", { type: "submit", className: "sac-button sac-primary", disabled: !hasAnything, "aria-describedby": hasAnything ? undefined : `${titleId}-hint`, children: S.send }), hasAnything ? null : _jsx("span", { id: `${titleId}-hint`, className: "sac-muted", children: S.sendHint })] })] })), _jsx(Toasts, {})] }) }));
 }

package/dist/client/words.d.ts

@@ -103,6 +103,9 @@ export interface Strings {
     issueLink: (n: number) => string;
     /** The accessible name of the list of context, each row a tick box. */
     contextLegend: string;
+    /** The app's own note, shown under the what-goes list (or the one line) and before Send, never instead of it: what
+     *  only the app can say about where a report goes and what it carries. Empty shows nothing. */
+    destinationNote: string;
 }
 export declare const DEFAULT_STRINGS: Strings;
 export declare function stringsFor(words: Words): Strings;

package/dist/client/words.js

@@ -91,6 +91,7 @@ export const DEFAULT_STRINGS = {
     movedToast: (words, note) => (note ? `Your suggestion: ${words}. ${note}` : `Your suggestion: ${words}`),
     issueLink: (n) => `Issue #${n}`,
     contextLegend: 'Also shared, so it can be fixed (untick anything to leave it out)',
+    destinationNote: '',
 };
 export function stringsFor(words) {
     return { ...DEFAULT_STRINGS, ...words.text };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supersuit/suggest-a-change",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "The report format and flow behind a Suggest a change button: what a report is, who acts at each step, the screens, and the check every app runs. The contract has zero dependencies.",
   "type": "module",
   "bin": {

package/src/client/adapters.ts

@@ -8,7 +8,7 @@ import type { StoreAdapter } from './reports.ts'
 import type { startTake } from './recorder.ts'
 import type { Words } from './words.ts'
 import type { Destination } from '../github/compose.ts'
-import type { AppContextItem } from './context.ts'
+import type { AppContextItem, ContextKey } from './context.ts'
 
 export type Role = 'operator' | 'member' | 'maintainer'
 export type Kind = 'change' | 'broken' | 'feedback'
@@ -84,8 +84,9 @@ export interface Adapters {
    *  (the same list the issue is written from); null or absent keeps the one-line note. */
   destination?(): Promise<SheetDestination | null>
   /** Anything app-specific that would help fix it, each with why it is shared (an item without a why is dropped). Or
-   *  `{ items?, precise? }`, where `precise: true` also asks the browser for the person's location (its permission prompt). */
-  context?: (() => Promise<AppContextItem[]>) | { items?(): Promise<AppContextItem[]>; precise?: boolean }
+   *  `{ items?, precise?, off? }`, where `precise: true` also asks the browser for the person's location (its permission
+   *  prompt) and `off` turns built-in items off: an item off is never collected, never listed and never in the issue. */
+  context?: (() => Promise<AppContextItem[]>) | { items?(): Promise<AppContextItem[]>; precise?: boolean; off?: readonly ContextKey[] }
   /** How to reach the sender, from what the app already knows. Shared by default to a private repo, off for a public one. */
   contact?(): Promise<Contact | null>
 }

package/src/client/context.ts

@@ -2,7 +2,9 @@
 // for the person sending, why it is shared; the sheet lists them all, on by default, and any one can be left out.
 //
 // The trail (the last pages, taps and errors) is kept from the moment the module first mounts, in memory only, in
-// small ring buffers. NEVER captured: what anyone typed (an input's value), cookies, storage, or a query string.
+// small ring buffers. NEVER captured: what anyone typed (an input's value), cookies, storage, or a query string, nor
+// any text of an element marked `data-private` or inside one. An app turns any built-in item off (`ContextKey`): an item
+// off is never kept, never listed and never sent.
 import type { Identity } from './adapters.ts'
 
 export interface ContextItem { key: string; label: string; value: string; why: string }
@@ -11,14 +13,20 @@ export interface ReportContext extends Trail { items: ContextItem[] }
 /** What an app adds through the `context` adapter: anything app-specific, each with why it helps. */
 export interface AppContextItem { label: string; value: string; why: string }
 
+/** Every built-in item an app can turn off. `pages`, `taps` and `errors` are the trail; the rest are the items' keys. */
+export const CONTEXT_KEYS = ['taps', 'pages', 'errors', 'time', 'language', 'device', 'screen', 'appearance', 'connection', 'age', 'account'] as const
+export type ContextKey = typeof CONTEXT_KEYS[number]
+
 const MAX = { routes: 10, taps: 20, errors: 10, items: 40 }
 // ONE trail per page, however many copies of the module a host bundles: the state lives on the global object under a
 // registered symbol, so a second copy finds the first one's listeners installed and shares its trail.
-type Shared = { trail: Trail; installedAt: number; undo: (() => void) | null }
+type Shared = { trail: Trail; installedAt: number; undo: (() => void) | null; off?: Set<string> }
 const SHARED = Symbol.for('@supersuit/suggest-a-change/context')
 const shared: Shared = ((globalThis as Record<symbol, unknown>)[SHARED] as Shared | undefined)
   ?? ((globalThis as Record<symbol, unknown>)[SHARED] = { trail: { routes: [], taps: [], errors: [] }, installedAt: 0, undo: null }) as Shared
 const trail = shared.trail
+// What the app turned off, for the page: once off, the listeners keep nothing of it until a reset.
+const offSet = () => (shared.off ??= new Set())
 
 const clip = (s: string, max: number) => (s.length <= max ? s : `${s.slice(0, max - 1).trimEnd()}…`)
 const iso = () => new Date().toISOString()
@@ -44,15 +52,30 @@ const routeOf = (href: string) => {
 }
 
 function recordRoute() {
-  if (typeof location === 'undefined') return
+  if (typeof location === 'undefined' || offSet().has('pages')) return
   const route = routeOf(location.href)
   if (trail.routes.at(-1)?.route === route) return
   push(trail.routes, { route: clip(route, 300), at: iso() }, MAX.routes)
 }
 
-/** What a tapped thing is called: its label or its text, never what was typed into it. */
+const PRIVATE = '[data-private]:not([data-private="false"])'
+/** An element's text with every `data-private` part left out. */
+function publicText(el: Element): string {
+  let out = ''
+  const walk = (n: Node) => {
+    if (n.nodeType === 3) out += n.textContent ?? ''
+    else if (n instanceof Element && !n.matches(PRIVATE)) n.childNodes.forEach(walk)
+    else if (!(n instanceof Element)) n.childNodes.forEach(walk)
+  }
+  el.childNodes.forEach(walk)
+  return out
+}
+
+/** What a tapped thing is called: its label or its text, never what was typed into it, and never the text of
+ *  anything marked `data-private` (a child's name on a button): a tap there is only "something private". */
 function labelOf(target: EventTarget | null): string | null {
   if (!(target instanceof Element)) return null
+  if (target.closest(PRIVATE)) return 'something private'
   // Anything someone types into is "a text field", by its own label at most and never its text: an editable region,
   // a text, search or combo box, wherever inside it the tap landed.
   const typing = target.closest('[contenteditable]:not([contenteditable="false"]), [role="textbox"], [role="searchbox"], [role="combobox"]')
@@ -69,7 +92,8 @@ function labelOf(target: EventTarget | null): string | null {
     return type === 'checkbox' ? 'a checkbox' : type === 'radio' ? 'a choice' : type === 'button' || type === 'submit' ? clip(el.value ? 'a button' : 'a button', 60) : 'a text field'
   }
   if (aria) return clip(aria, 60)
-  const text = (el.textContent ?? '').replace(/\s+/g, ' ').trim()
+  if (el.closest(PRIVATE)) return 'something private'
+  const text = publicText(el).replace(/\s+/g, ' ').trim()
   if (text) return clip(text, 60)
   const title = el.getAttribute('title')?.trim()
   return title ? clip(title, 60) : el.tagName.toLowerCase()
@@ -82,17 +106,30 @@ const firstFrame = (stack: unknown): string | undefined => {
 }
 const messageOf = (x: unknown): string => (x instanceof Error ? x.message : typeof x === 'string' ? x : x === undefined ? '' : typeof x === 'number' || typeof x === 'boolean' ? String(x) : '[object]')
 function recordError(message: string, stack?: unknown) {
+  if (offSet().has('errors')) return
   push(trail.errors, { message: clip(withoutQueries(message || 'An error with no message'), 300), ...(firstFrame(stack) ? { frame: firstFrame(stack) } : {}), at: iso() }, MAX.errors)
 }
 
-/** Starts keeping the trail. Idempotent: every screen of the module calls it on mount, and it installs once. */
-export function installContextListeners(): void {
+/** Empties the parts of the trail an app turned off. */
+function forgetOff() {
+  const off = offSet()
+  if (off.has('pages')) trail.routes.length = 0
+  if (off.has('taps')) trail.taps.length = 0
+  if (off.has('errors')) trail.errors.length = 0
+}
+
+/** Starts keeping the trail. Idempotent: every screen of the module calls it on mount, and it installs once. `off`
+ *  turns trail items off for the page (`taps`, `pages`, `errors`): from then on nothing of them is kept, and what was
+ *  kept is forgotten. */
+export function installContextListeners(o: { off?: readonly string[] } = {}): void {
+  for (const k of o.off ?? []) offSet().add(k)
+  forgetOff()
   if (shared.undo || typeof window === 'undefined' || typeof document === 'undefined') return
   shared.installedAt = Date.now()
   // A wrapper a host put on top of ours may outlive a reset; once reset, ours only passes the call through.
   let live = true
   recordRoute()
-  const onClick = (e: Event) => { const l = labelOf(e.target); if (l) push(trail.taps, { label: l, at: iso() }, MAX.taps) }
+  const onClick = (e: Event) => { if (offSet().has('taps')) return; const l = labelOf(e.target); if (l) push(trail.taps, { label: l, at: iso() }, MAX.taps) }
   const onError = (e: Event) => { const ev = e as ErrorEvent; recordError(ev.message || messageOf(ev.error), (ev.error as { stack?: unknown } | undefined)?.stack) }
   const onRejection = (e: Event) => { const reason = (e as PromiseRejectionEvent).reason; recordError(`Unhandled rejection: ${messageOf(reason)}`, (reason as { stack?: unknown } | undefined)?.stack) }
   const onNav = () => recordRoute()
@@ -129,6 +166,7 @@ export function installContextListeners(): void {
 /** Stops keeping the trail and forgets it (tests, and a host that signs someone out). */
 export function resetContext(): void {
   shared.undo?.(); shared.undo = null
+  offSet().clear()
   trail.routes.length = 0; trail.taps.length = 0; trail.errors.length = 0
 }
 
@@ -196,19 +234,28 @@ export interface CollectOptions {
   /** A user agent to read instead of the browser's (tests). */
   userAgent?: string
   now?: () => number
+  /** Built-in items the app turned off: never collected, so never listed and never sent. */
+  off?: readonly ContextKey[]
+}
+
+/** The `off` list from the `context` adapter, whatever form it takes; unknown keys are ignored. */
+export function contextOff(c: unknown): ContextKey[] {
+  const off = c && typeof c === 'object' ? (c as { off?: unknown }).off : undefined
+  return Array.isArray(off) ? off.filter((k): k is ContextKey => (CONTEXT_KEYS as readonly string[]).includes(k)) : []
 }
 
 /** Everything the module knows that would help fix it, each item with why it is shared, and the trail. */
 export async function collectContext(o: CollectOptions = {}): Promise<ReportContext> {
   const now = new Date(o.now?.() ?? Date.now())
   const items: ContextItem[] = []
-  const add = (key: string, label: string, value: string | undefined | null, why: string) => { if (value) items.push({ key, label: clip(label, 80), value: clip(value, 500), why: clip(why, 200) }) }
+  const off = new Set<string>(o.off ?? [])
+  const add = (key: string, label: string, value: string | undefined | null, why: string) => { if (off.has(key)) return; if (value) items.push({ key, label: clip(label, 80), value: clip(value, 500), why: clip(why, 200) }) }
   const who = o.identity as (Identity & { name?: string; username?: string }) | null | undefined
   add('account', 'Your name in the app', who?.name || who?.username, 'so whoever fixes it knows who to thank, and can look at your account if the problem is in it')
   add('time', 'Your local time', timeWords(now), 'so the fixer can line it up with what the app logged at that moment')
   const langs = typeof navigator === 'undefined' ? [] : (navigator.languages?.length ? [...navigator.languages] : navigator.language ? [navigator.language] : [])
   add('language', 'Your languages', langs.join(', '), 'some problems only happen in one language or date format')
-  add('device', 'Your device', await deviceWords(o.userAgent), 'so the fixer can try it on the same kind of device and browser')
+  add('device', 'Your device', off.has('device') ? '' : await deviceWords(o.userAgent), 'so the fixer can try it on the same kind of device and browser')
   if (typeof window !== 'undefined') {
     const s = typeof screen === 'undefined' ? null : screen
     add('screen', 'Screen and window', `${s ? `${s.width}x${s.height} screen, ` : ''}${window.innerWidth}x${window.innerHeight} window, ${Math.round((window.devicePixelRatio || 1) * 100) / 100}x pixels`, 'how things are laid out depends on the size of the screen and window')
@@ -239,5 +286,6 @@ export async function collectContext(o: CollectOptions = {}): Promise<ReportCont
       })
     } catch { /* the app's own context failing never blocks a suggestion */ }
   }
-  return { items: items.slice(0, MAX.items), ...contextTrail() }
+  const t = contextTrail()
+  return { items: items.slice(0, MAX.items), routes: off.has('pages') ? [] : t.routes, taps: off.has('taps') ? [] : t.taps, errors: off.has('errors') ? [] : t.errors }
 }

package/src/client/index.ts

@@ -15,5 +15,5 @@ export * from './mine.tsx'
 export { seenStatuses, markSeen, moved, onSeen, seenKey, type Seen } from './seen.ts'
 export * from './detail.tsx'
 export { refreshIdentity } from './runtime.ts'
-export { collectContext, installContextListeners, contextTrail, resetContext, parseUserAgent, withoutQueries } from './context.ts'
-export type { ContextItem, AppContextItem, ReportContext, Trail, CollectOptions } from './context.ts'
+export { collectContext, installContextListeners, contextTrail, resetContext, parseUserAgent, withoutQueries, contextOff, CONTEXT_KEYS } from './context.ts'
+export type { ContextItem, AppContextItem, ReportContext, Trail, CollectOptions, ContextKey } from './context.ts'

package/src/client/runtime.ts

@@ -7,7 +7,7 @@
 // when none of its writes is left there, because a write leaves only after the adapter said `done`.
 import { useEffect, useRef, useState } from 'react'
 import type { Adapters, Identity } from './adapters.ts'
-import { installContextListeners } from './context.ts'
+import { contextOff, installContextListeners } from './context.ts'
 import { draftKey } from './drafts.ts'
 import { openStore, type Store } from './idb.ts'
 import { makeOutbox, type Op, type Sent } from './outbox.ts'
@@ -181,7 +181,9 @@ export function useRuntime(adapters: Adapters): { rt: Runtime | null; who: Ident
   const current = useRef<{ account: string | null; release: () => void }>({ account: null, release: () => {} })
   const alive = useRef(true)
   // Every screen of the module mounts this, so the trail (pages, taps, errors) starts with the first one; it installs once.
-  useEffect(() => { installContextListeners() }, [])
+  // What the app turned off is never kept, from the first mount on.
+  const off = contextOff(adapters.context).join(',')
+  useEffect(() => { installContextListeners({ off: off ? off.split(',') : [] }) }, [off])
   useEffect(() => { alive.current = true; return () => { alive.current = false; current.current.release(); current.current = { account: null, release: () => {} } } }, [])
   useEffect(() => { const l = () => setSignal((n) => n + 1); identityListeners.add(l); return () => { identityListeners.delete(l) } }, [])
   useEffect(() => { if (state.rt) state.rt.adapters = adapters })

package/src/client/sheet.tsx

@@ -10,7 +10,7 @@ import type { Adapters, FieldProps, Kind, SheetDestination } from './adapters.ts
 import { destinationWords, whatGoes, type GoesItem } from '../github/compose.ts'
 import { validContact } from '../contract.mjs'
 import type { Contact } from './adapters.ts'
-import { collectContext, type ReportContext } from './context.ts'
+import { collectContext, contextOff, type ReportContext } from './context.ts'
 import { useDialog } from './dialog.ts'
 import { DefaultField } from './default-field.tsx'
 import { draftKey, loadDraft, saveDraft } from './drafts.ts'
@@ -99,10 +99,13 @@ export function SuggestSheet({ adapters, where, onClose, initial }: { adapters:
     adapters.destination().then((d) => { if (live) setDest(d && typeof d.repo === 'string' ? d : null) }, () => { if (live) setDest(null) })
     return () => { live = false }
   }, [adapters])
+  // What the app turned off, as the list's keys: never collected, never listed, never sent.
+  const off = useMemo(() => contextOff(adapters.context), [adapters])
+  const offPieces = useMemo(() => new Set(off.map((k) => (k === 'pages' ? 'routes' : k === 'taps' || k === 'errors' ? k : `ctx:${k}`))), [off])
   const contextOptions = useCallback(() => {
     const c = adapters.context
-    return typeof c === 'function' ? { extra: c, precise: false } : { extra: c?.items ? () => c.items!() : undefined, precise: Boolean(c?.precise) }
-  }, [adapters])
+    return typeof c === 'function' ? { extra: c, precise: false, off } : { extra: c?.items ? () => c.items!() : undefined, precise: Boolean(c?.precise), off }
+  }, [adapters, off])
   const gather = useCallback(() => collectContext({ identity: who ?? null, where, about: adapters.about, ...contextOptions(), ...(adapters.phone?.now ? { now: adapters.phone.now } : {}) }), [who, where, adapters, contextOptions])
   useEffect(() => {
     if (!who) return
@@ -293,6 +296,8 @@ export function SuggestSheet({ adapters, where, onClose, initial }: { adapters:
     { name: 'screen', label: S.diagScreen, value: screenSize() },
     { name: 'device', label: S.diagDevice, value: adapters.device ? adapters.device() : phoneType() },
   ] as { name: Diag; label: string; value: string | undefined }[]).filter((d): d is { name: Diag; label: string; value: string } => Boolean(d.value))
+    // A diagnostic whose context item the app turned off is not said, listed or sent either.
+    .filter((d) => !offPieces.has(({ device: 'ctx:device', screen: 'ctx:screen', at: 'ctx:time' } as Record<string, string>)[d.name] ?? ''))
   const lineParts = [`this screen (${where.screen}, ${sanitizeRoute(where.route)})`, ...avail.map((d) => d.label)]
   const summary = `${S.goesTo(adapters.words.owner)} ${S.includes(lineParts)}`
   // With a destination, the one line becomes the list of exactly what the issue will carry, built by the same function
@@ -307,7 +312,7 @@ export function SuggestSheet({ adapters, where, onClose, initial }: { adapters:
     ...(ctx ? { context: ctx } : {}),
     ...(contact ? { who: { contact } } : {}),
   }, dest ?? { repo: '', public: false, account: '', attaches: true })
-  const isOn = (key: string, fallback = true) => choice[key] ?? rows.find((r) => r.key === key)?.on ?? fallback
+  const isOn = (key: string, fallback = true) => !offPieces.has(key) && (choice[key] ?? rows.find((r) => r.key === key)?.on ?? fallback)
   const goes = dest ? rows : null
   const destWords = dest ? destinationWords(dest) : null
   const optionalRow = (g: GoesItem) => (
@@ -474,6 +479,9 @@ export function SuggestSheet({ adapters, where, onClose, initial }: { adapters:
               </div>
             )}
 
+            {/* The app's own note: under the list, before Send, never instead of it. */}
+            {S.destinationNote ? <p className="sac-note" data-sac-note="">{S.destinationNote}</p> : null}
+
             {error ? <p role="alert" className="sac-error">{error}</p> : null}
             <div className="sac-actions">
               <button type="submit" className="sac-button sac-primary" disabled={!hasAnything} aria-describedby={hasAnything ? undefined : `${titleId}-hint`}>{S.send}</button>

package/src/client/styles.css

@@ -58,6 +58,7 @@
 .sac-error { color: var(--sac-danger); margin: 0; }
 .sac-danger { color: var(--sac-danger); font-weight: 600; }
 .sac-goes p { margin: 0; }
+.sac-note { font-size: 0.8rem; margin: 0; color: var(--sac-fg); }
 .sac-goes-list { margin: 2px 0; padding: 0; list-style: none; display: flex; flex-wrap: wrap; gap: 2px 0; }
 .sac-goes-list li:not(:last-child)::after { content: " \00b7 "; white-space: pre; color: var(--sac-muted); }
 .sac-issue-link { color: var(--sac-accent); font-size: 0.9rem; }

package/src/client/words.ts

@@ -109,6 +109,9 @@ export interface Strings {
   issueLink: (n: number) => string
   /** The accessible name of the list of context, each row a tick box. */
   contextLegend: string
+  /** The app's own note, shown under the what-goes list (or the one line) and before Send, never instead of it: what
+   *  only the app can say about where a report goes and what it carries. Empty shows nothing. */
+  destinationNote: string
 }
 
 export const DEFAULT_STRINGS: Strings = {
@@ -199,6 +202,7 @@ export const DEFAULT_STRINGS: Strings = {
   movedToast: (words, note) => (note ? `Your suggestion: ${words}. ${note}` : `Your suggestion: ${words}`),
   issueLink: (n) => `Issue #${n}`,
   contextLegend: 'Also shared, so it can be fixed (untick anything to leave it out)',
+  destinationNote: '',
 }
 
 export function stringsFor(words: Words): Strings {