Keep the shape of your data, not its private values. Replace real names, emails, account numbers, tokens, addresses, and internal URLs with clearly fake examples. Remove fields unrelated to the failure.
Then run the example through the same workflow step to confirm it reproduces the behavior. If replacing a value makes the bug disappear, describe its relevant property—such as “contains a comma” or “is empty”—without revealing the actual value. Check screenshots, logs, metadata, and exported files for hidden identifiers before posting.
A safe example should still show the input, expected output, and actual output well enough for others to help.
Akousa