diff --git a/.agents/plugins/marketplace.json b/.agents/plugins/marketplace.json
index 13f3630..0a754a5 100644
--- a/.agents/plugins/marketplace.json
+++ b/.agents/plugins/marketplace.json
@@ -7,7 +7,7 @@
         {
             "name": "spatial-artifacts",
             "description": "3D design for Claude Code and Codex, the way Artifacts handles UI: Claude builds 3D mockups you orbit, adjust with gizmos and comment on, plus 2D pages, all on a local viewer",
-            "version": "0.1.1",
+            "version": "0.2.0",
             "source": {
                 "source": "local",
                 "path": "./plugins/spatial-artifacts"
diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index c309b60..ff6fa70 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -5,13 +5,13 @@
     },
     "metadata": {
         "description": "3D design for Claude Code, the way Artifacts handles UI",
-        "version": "0.1.1"
+        "version": "0.2.0"
     },
     "plugins": [
         {
             "name": "spatial-artifacts",
             "description": "3D design for Claude Code, the way Artifacts handles UI: Claude builds 3D mockups you orbit, adjust with gizmos and comment on, plus 2D pages, all on a local viewer",
-            "version": "0.1.1",
+            "version": "0.2.0",
             "license": "MIT",
             "source": "./plugins/spatial-artifacts",
             "category": "productivity"
diff --git a/plugins/spatial-artifacts/.claude-plugin/plugin.json b/plugins/spatial-artifacts/.claude-plugin/plugin.json
index d699f12..b1640f0 100644
--- a/plugins/spatial-artifacts/.claude-plugin/plugin.json
+++ b/plugins/spatial-artifacts/.claude-plugin/plugin.json
@@ -1,10 +1,13 @@
 {
     "name": "spatial-artifacts",
     "description": "3D design for Claude Code, the way Artifacts handles UI: Claude builds 3D mockups you orbit, adjust with gizmos and comment on, plus 2D pages, all on a local viewer",
-    "version": "0.1.1",
+    "version": "0.2.0",
     "license": "MIT",
     "homepage": "https://github.com/kpal81xd/spatial-artifacts",
     "repository": "https://github.com/kpal81xd/spatial-artifacts",
+    "documentationUrl": "https://github.com/kpal81xd/spatial-artifacts/blob/main/plugins/spatial-artifacts/README.md",
+    "supportUrl": "https://github.com/kpal81xd/spatial-artifacts/issues",
+    "privacyPolicyUrl": "https://github.com/kpal81xd/spatial-artifacts/blob/main/plugins/spatial-artifacts/README.md#privacy",
     "author": {
         "name": "kpal"
     }
diff --git a/plugins/spatial-artifacts/.codex-plugin/plugin.json b/plugins/spatial-artifacts/.codex-plugin/plugin.json
index 2c76d2c..5b6b994 100644
--- a/plugins/spatial-artifacts/.codex-plugin/plugin.json
+++ b/plugins/spatial-artifacts/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
     "name": "spatial-artifacts",
-    "version": "0.1.1",
+    "version": "0.2.0",
     "license": "MIT",
     "homepage": "https://github.com/kpal81xd/spatial-artifacts",
     "repository": "https://github.com/kpal81xd/spatial-artifacts",
diff --git a/plugins/spatial-artifacts/README.md b/plugins/spatial-artifacts/README.md
index 1ea5f5f..818d404 100644
--- a/plugins/spatial-artifacts/README.md
+++ b/plugins/spatial-artifacts/README.md
@@ -62,6 +62,20 @@ Codex uses the same server and daemon, so both share one set of artifacts.
 - Codex has no monitors. On your first message the prompt hook starts a `watch-comments.ts --codex` watcher for that
   session, which hands comments to `codex queue` (experimental) and exits with Codex.
 
+## Privacy
+
+The plugin has no server of its own and collects nothing. It runs a daemon on `127.0.0.1` that only your browser and
+your Claude Code session reach.
+
+- **Stored, on your machine only:** published pages and their files, comment threads (with your OS username as the
+  author, or `SPATIAL_ARTIFACTS_USER`), images attached to comments, page database rows, uploaded assets and the
+  permissions you granted. All of it lives in `~/.spatial-artifacts`; delete that folder to remove it.
+- **Sent to Claude:** what you ask Claude to read through the plugin's tools, such as comments you send to Claude and
+  page data, as part of your normal Claude Code session.
+- **Sent elsewhere:** nothing by the plugin. Pages load scripts from five CDN hosts (cdnjs, jsDelivr, unpkg, Tailwind,
+  jQuery) and fonts from Google Fonts, so your browser requests those as it would on any website.
+- **Not collected:** no analytics, telemetry, accounts or credentials.
+
 ## Security
 
 - Binds `127.0.0.1` only and rejects any `Host` other than `localhost`, `127.0.0.1` or `<uuid>.localhost`.