SANDBOX DEMONSTRATION · UPDATED 12 NOVEMBER 2026

Privacy, with clear boundaries.

Fieldproof is a sandbox demonstration of community project funding and evidence review. Eastside Middle School and the project documents in the walkthrough are fictional samples. Do not submit sensitive personal records or photographs of children to this demonstration.

Your account and payment information

The app stores a private session identifier, your sandbox workspace, your actions, and provider payment identifiers needed to check a payment. PayPal handles its own login and checkout. Fieldproof never receives your PayPal password or card details.

If you choose Log in with PayPal to link a repayment destination, Fieldproof requests your email, account verification status, and payer ID. The destination is encrypted on the server. The app displays a masked label and the verification result. Linking an account does not authorize a repayment, marketing email, or future charge.

Evidence and public pages

Original evidence and account destinations are not public. Public Proof Pages require a separate review of redacted derivatives. A withdrawn page can be removed from its stable address, but previously downloaded or printed copies cannot be recalled.

Storage and service providers

Application state is persisted in PostgreSQL. Hosting uses Vercel. PayPal sandbox processes approved test transactions. AI services are used only through server-side adapters; credentials and repayment destinations must never be included in model prompts. The current sample walkthrough does not represent an AI run or actual physical work.

Sessions, invitations and browser storage

New demonstration workspaces normally use twelve-hour sessions. An invited supporter’s invitation, session and private return key share one fixed deadline set when the invitation is issued, up to seven days. Joining, retrying, returning or reloading does not extend it. Starting a new sample creates a separate workspace; it does not delete provider history or reverse a payment. Payment records are retained for reconciliation.

Session credentials stay in HttpOnly cookies. Invitation and private return links authenticate by possession. Anyone holding a return key can open the original supporter profile while its fixed deadline and current access allow it; keep the key private. A self-declared invitation name does not independently verify a person, email address, organization or PayPal identity. Joining does not approve a pledge, sponsor agreement or payment.

Where available, per-tab session storage retains private invitation or return capabilities and exact pending acceptance or return requests, including the recipient’s self-declared name and request identity for interrupted-response recovery. Browser storage also retains test operation identities. If storage is unavailable, the page keeps the pending request in memory and explains its reload limit. No invitation email or external message is sent by these flows.