Correct API-key handling notes in README

README.md

@@ -22,10 +22,11 @@ This Space does not ship an API key. Paste your own in the field at the top —
 create one in the [WaveSpeed dashboard](https://wavespeed.ai/dashboard).
 
 Your key is sent only to `api.wavespeed.ai` to run the model. It is not stored,
-not logged, and not written to disk; it is stripped out of error messages
-before they are displayed, and Gradio's flagging and API-page features (both of
-which would otherwise record or republish inputs) are disabled. Generations are
-billed to your own account.
+not logged, and not written to disk. It is masked in the browser, stripped out
+of error messages before they are displayed, and the generate event is marked
+private so it never appears on Gradio's public API page — which would otherwise
+publish client snippets containing every input, the key among them.
+Generations are billed to your own account.
 
 ## Development