Firebase credentials and message data
The tester transmits the service account JSON, device token, notification content, and optional custom data to the site's send endpoint so it can authenticate and submit the requested FCM message. Our application code does not intentionally persist those values to localStorage, cookies, or a database.
Hosting and network processing
Requests still pass through the hosting provider and network infrastructure required to operate the service. Operators of those systems may process technical request metadata under their own policies. Do not use credentials you are not authorized to use.
Analytics and advertising
If analytics or Google AdSense is enabled on the production site, those services may use cookies or similar technologies according to their own policies and applicable consent requirements. Credential form values are not intentionally sent to advertising code by this application.
Security
Service account JSON files contain sensitive private keys. Prefer a dedicated least-privilege account for testing and rotate keys if exposure is suspected.