[ChefControl]

Part of #150. Only the link from the Steam store page is left; it's added with the store page (#153).

What

• public/privacy.html: a one-page privacy notice, published with the site at chefcontrol.github.io/floe-market/privacy.html. It covers both versions in plain words: who's responsible, what's kept and why, who sees it, how long it's kept, rights and how to ask, children, and changes to the notice. It has no fonts or scripts from other sites.
• Settings → About → 🛡️ Privacy notice ↗: opens it in its own tab, between Ko-fi and Credits & Copyrights. It's a plain link in every build and isn't behind the Ko-fi switch, so the Steam build (Steam: one build switch for web and Steam #160) keeps it.
• test/ui.test.ts: checks the row, its place in About, that it survives the Ko-fi switch, and the page's contact and both sections.

Worked out from the code, not the issue's list

• Sign-in: Firebase Auth keeps the account's name, email address and profile picture link.
• Signed-out players: the game still connects to Firebase about 4 seconds after it starts, and when the scoreboard or the wall of shame opens.
• Public names: scores/{uid} and shame/{uid} show the player's full Google name to everyone. The owner asked the epic session to open a follow-up about this.
• Reports: the pictures and save are deleted after 30 days. The note, device details and errors stay in the private floe-market-reports issues, under a hash of the account number, "as long as they help me fix and improve the game" (the owner's choice).
• Hosting: GitHub Pages hosts the site, and GitHub also holds the reports repo.
• Steam: the section follows Epic: Steam readiness: from the browser game to a release on Steam #142's split: Steam Cloud, Steam leaderboards and achievements, and a report file that only reaches the developer if the player posts or emails it.

After the bundled fonts (#210, merged)

• New icon: Bundle the fonts, and draw every emoji as the game's own icon (#148) #210 draws every emoji the game shows, so the row's 🛡️ gets its own drawing, a blue shield with a gold tick (src/icons/hud.ts). Floe Emoji is rebuilt with it (scripts/fonts/build.py), and the text fonts come out unchanged.
• Fonts: the notice's headings use the bundled Baloo 2, so the page loads nothing from another site.
• Docs: docs/game.md lists the row under About and adds a Privacy notice section. Any PR that changes what the game keeps or sends must update the notice and its date, with the owner's OK.

With #214 (scoreboard names)

#214 changes the scoreboards to show "Pat S." and adds a switch in Settings to leave them. Whichever of #211 and #214 merges second must update the notice's 🏆 scoreboard and 💔 wall of shame rows to match.

Design system

The row follows the Settings card: a chip row, an emoji in the 24px column, and ↗ for a link out. The page uses the game's colours (bg, pill, ink, go, and the dark theme's) on a pill card. The book's Settings card (README and preview) now has the Privacy notice row, and its copy of Floe Emoji has the shield. No token changed.

Owner sign-off

Oran reviewed the draft (https://claude.ai/artifact/HD67f1RbL5MBE24NNhis4j) and gave the name, the contact and the retention choice. The text goes live when this PR is merged.

🤖 Generated with Claude Code