Product Changelog

Rebuilt About with the current public operator identity, responsibility map, funding model, editorial responsibility, independence statement, and explicit boundary for unverified registration, office, and jurisdiction details.

Rebuilt Contact as a six-category directory for support, privacy, security, legal/policy, copyright/content, and editorial/accessibility feedback with evidence and data-minimization guidance.

Published dedicated Copyright and Content Concerns plus Editorial Corrections and Accessibility Feedback routes with manual-review, external-platform, legal-determination, and response-time boundaries.

Centralized the public operator name and verified mailbox in configuration, added category-specific subjects, footer/SEO/offline integration, and automated checks without inventing domain mailboxes or business records.

Replaced contradictory global no-store/cache-first behavior with revalidated public HTML, network-first approved navigation, release-versioned static caches, strict runtime/private/error exclusions, and a dedicated noindex offline fallback.

Reduced repeated page weight by moving shared interface, consent, install, and PWA behavior into one deferred cacheable script; added bounded delivery checks, image decoding/lazy-loading improvements, and guarded Brotli/gzip rules for capable production servers.

Removed animation from the Home LCP heading, moved ordered downloader scripts out of the document head without changing their runtime, and added a read-only production audit for canonical redirects, compression, cache policies, deployed assets, worker version, offline fallback, and real 404 behavior.

Published a searchable Help hub with 37 answers, exact-message troubleshooting, filters, keyboard-friendly native disclosures, escalation guidance, and nine detailed supporting guides.

Rebuilt Supported Platforms around three public platforms, six approved tools, accepted domains, candidate link patterns, restrictions, result boundaries, review dates, and official sources.

Expanded Security & Data Handling with code-grounded request, transport, proxy, storage, vendor, abuse, assurance, and disclosure details; added shared browser response headers and RFC 9116 security contact discovery.

Added this manually maintained Status page and Changelog with explicit monitoring, history, deployment, and uptime limitations.

Added focused content/implementation contracts and retained the wider PHP, SEO, schema, accessibility, isolation, Apache, and JavaScript release checks.

Rebuilt the six approved Facebook, Instagram, and TikTok tool pages with unique link scope, device steps, result limitations, troubleshooting, processing/retention details, responsible-use guidance, and accessible FAQs.

Removed or corrected universal format, resolution, audio, watermark, quality, private-access, and success claims that the implementation cannot guarantee.

Consolidated the duplicate TikTok No Watermark route into the canonical TikTok Video tool because both used the same request and result behavior without a distinct verified contract.

Kept the three direct YouTube review routes functional but absent from public navigation, Home, directories, sitemap, indexing, and offline caches pending policy review.

Centralized page metadata, canonical URLs, robots directives, social images, schema types, sitemap inclusion, breadcrumbs, and conservative defaults for unknown pages.

Standardized extensionless public URLs, rebuilt the sitemap around canonical indexable routes, and added a designed 404 response with an actual 404 status and noindex handling.

Reworked Home into a clearer public-link workflow with accurate provider-dependent results, six supported-tool routes, useful explanations, and responsive navigation/content.

Moved Google Analytics, Contentsquare, and AdSense initialization behind the accepted optional-cookie state and added a reusable Cookie Settings control.

Removed hard-coded production secrets from tracked runtime code and added environment/untracked-local configuration with a safe example file.

Replaced raw provider-response logging, blocked direct access to sensitive file types and internal directories, and excluded local secrets and logs from Git.

Added filtered provider results and signed proxy links with approved HTTPS hosts, public-address checks, redirect revalidation, TLS verification, rate/size/type/time limits, and no-store runtime responses.

Changed server cache storage to a SHA-256 URL key, blank legacy plaintext URL field, filtered response, 15-minute expiry, and cleanup during normal lookup activity.