All prompts are stored server-side with immutable version history (1.0 → 1.1 → 2.0) and are never exposed to the browser on public pages.