History shows last four only

Purchase history never returns codeHash or the full gift code — only the last four characters.

APIs and the Gift cards history table never return codeHash or the full gift code. Only the last four characters appear after payment.

The SHA-256 hash stays server-side on the CreditPurchase row. DSAR export also omits codeHash.