The `30 days` aspect is what I'm saying should be configurable. For preview we could set it to rolling every 5 minutes for example. So we retain the same amount of security as your "expire in 5 minutes" logic, but if you reload your activity 15 times within that 5 minutes, the preview was cached for all of those reloads.

Using userid would be good, too.