GET /api/feedback now requires the admin key as a request header (X-Admin-Key), not a URL query param — a query-string secret lands in server/proxy logs, browser history, and Referer headers. Enter it below and this page will fetch and render the viewer for you.