What usually leaks
- Client IPv4 and IPv6 addresses
- Tokens and API keys in query strings
- Emails in reset and signup URLs
- Upstream hosts and internal IPs in error logs
Tips
- Consistent placeholders let you still count requests per client: every hit from <IP_3> came from the same address.
- Large logs: drop the file onto the tool. Files up to 10 MB are processed in your browser.