shared/app-registry.mjs lists every app that reports devices or receives notifications (Whistlegraph wired; AC, Aesel, Oskiewar, Menu Band and sotce.net ready to hook in). shared/app-devices.mjs keeps one Mongo row per app + device in app-devices: verified account and handle, build, version, model, OS, first/last seen, opens, and later its push registration and topics. Rows do not expire; account deletion removes them. /api/app-device takes reports (bearer token optional; the app's Auth0 tenant verifies it), lists your own devices, and removes one. toolchain/devices.mjs shows devices by app, person and build. Whistlegraph 115 reports open on every activation, login when the account verifies, and logout on sign-out, using identifierForVendor. The privacy text now says so and drops the retired personal-model lines.