Offline verification is privacy-friendly (no data sent to developer). Online verification could theoretically transmit: