Immutable
release. Only release title and notes can be modified.
Privacy claims brought fully in line with the code.
- Google-ad-only consent for conversion tracking. Conversions reach Google only after a visitor who arrived from a Google ad opts in (one optional checkbox, no site-wide banner, withdrawable in Settings). The upload carries a Consent Mode v2 signal.
- Conversation history is encrypted at rest in IndexedDB with AES-256-GCM.
- Trust badge reworded to "No tracking cookies, no profiling", a claim provable for every visitor.
- README, MEASUREMENT, the security docs, and the legal pages now say exactly what the code does. The gclid is described as personal data on a consent basis and is kept out of our analytics.
- Removed the diagnostic Google Sheet (the only place a full click ID was retained) and the shallow "Start Exploring" conversion.
- English privacy policy added at /privacy.
Full details in CHANGELOG.md.