Check a record with the receipt and private token.

Idea, problem, collaboration, and formal application records are private records rather than public boards. The server stores only a password hash of the private token; the token shown after submission should be saved by the record holder.