If you’ve built alerting systems or privacy-minimal services, I’d love to hear what you’d try to break first.
Those storage.googleapis.com URLs are just Supabase Storage (it sits on Google Cloud Storage). I’m not using it for anything user related or anything like that, it’s mostly static stuff + app data. Not sure how to get around that, unless I host everything myself, which I dont have the capacity to do.
jwnozfjzczoufsdzwfvd.supabase.co is just the Supabase project endpoint (db/auth/storage).