To clarify: no PII leaked from Lovable apps ended up in Common Crawl. Common Crawl was used solely to identify Lovable apps—not to retrieve leaked data. It does not store XHR responses, which are how data is retrieved from Supabase.

Any data fetched during the analysis was deleted long ago, though you’ll have to take my word for that. Only metadata was retained.

That said, I fully agree that no one can say for certain whether anyone else collected this data or what happened to it afterward.