API keys & security

How store API keys work, rotating them safely, and what to do if one leaks.

• How API keys workKeys start with rblr_, are shown exactly once, and can do only one thing: report your own store’s visit events.
• Rotate a keyGenerate the replacement in Settings — the new key exists before the old one is revoked, so your store is never left keyless.
• What to do if a key leaksRotate immediately — then know the blast radius: a leaked key can only pollute your visit log, nothing more.