Google demands HAR files with sensitive info to look into payment issues
Some perspective, since I&#x27;ve been on the other side of exactly this issue, but for another bigco:<p>While there may well be a backend issue, in many cases, the HAR file contains tons of useful details (in my product&#x27;s case) for things like &quot;what were responses from other service calls, was anything failing locally, was any state in a weird... state&quot; that can then let me better understand what&#x27;s going on in the backend, or even know where to be looking in the backend.  These large services are _so complex_ nowadays that looking at a slice of backend logs without the frontend to dovetail can often be a very partial view of the world, or be a needle-in-a-haystack scenario.<p>I&#x27;m giving them the benefit of the doubt here that it&#x27;s similar to my project, clearly, they could maybe just be running a script (since we similarly request a HAR for all reports, since 99% of the time in practice it _is_ very useful), and you won&#x27;t be harming anyone from trying to get a clear answer as to if the PG&#x2F;triage group actually needs it to move forward and pushing back if they don&#x27;t.<p>I also imagine that, if they&#x27;re anything like us, you could request explicit deletion of all your support data from that case after the case is done, and they&#x27;d have to comply per GDPR&#x2F;etc (We certainly would) and they likely already have to silo the information in ways that explicitly makes sure that sort of PII doesn&#x27;t end up in buckets it shouldn&#x27;t.  I don&#x27;t know if this moves the needle for you, CC #s are still touchy, but just thinking out loud.<p>Anyway, I hope this doesn&#x27;t come across as apologetic for lax security practices, just wanted to give this perspective as I just remember the feeling of frustration of the customer refusing to send logs with a similar justification and my going &quot;but it&#x27;s going to be _much_ harder&#x2F;impossible to diagnose your issue without that, and I have 0 doubts in my team&#x27;s ability to properly handle and dispose of secure data as professionals, we are literally legally obligated to.&quot;