drop ddg browser android/desktop data · parse fire button cleanup events
flags fire button wipe events · recent tab remnants · privacy dashboard · autofill gaps
heuristic screener · parses artifacts locally · no password cracking or live network · sqlite/json may be partial · not definitive proof