Prototype only — no real auth, database, or uploads. All data is mock and resets on reload.