Requested by Can · project thread

#What this changes

Publishes a privacy policy at /privacy, needed for the plugin directory listings (claude plugin validate --profile directory warns PRIVACY_URL_MISSING) and for a public open-source project in general.

• Operator Codician, contact hi@codician.com; no personal names.
• Written for the open-source model: self-hosted instances keep their own data and send nothing to Codician; the CLI, editor extensions and plugins talk only to the instance you set; diffinery.com's visitors, forms (early access, security reports), invite-only accounts and agent features are covered separately.
• Every fact comes from the code or existing docs: cookie names and lifetimes (__Host-dfy_session 30 days, dfy_csrf 30 days, __Host-dfy_d1 1 day, dfy_flash 1 minute, dfy_theme 400 days, today_collapsed 1 year, __Host-dfy_webauthn 5 minutes), early-access retention, email log 90 days, job logs 90 days, artifacts 1 to 90 days, audit log 2 years, exports 7 days, deleted usernames 90 days.
• Adapted from the legal draft in the project Library; the draft's 90-day session lifetime was wrong (sessions last 30 days).
• Linked in the footer and listed under Company in site/nav.json, so it is in the sitemap, llms.txt and the .md versions. privacy, terms and legal are now reserved usernames (/privacy used to fall through to an owner lookup and redirect to sign-in).

The terms of service and acceptable-use drafts are not published: they are written for a hosted service sold to others (fees, liability cap, governing law, DMCA agent), which diffinery.com isn't.

#How it was tested

node scripts/build-docs.mjs (no problems), pnpm exec vitest run test/unit/site.test.ts test/unit/docs.test.ts (reserved logins cover every site page), pnpm run typecheck.

#Checklist

• pnpm -r typecheck and pnpm -r test pass
• User- or admin-visible changes update the docs in apps/diffinery/docs (the page is the change)
• New D1 migrations use the next free number in apps/diffinery/migrations (none)

🤖 Generated with Claude Code

https://claude.ai/code/session_0156222tQpRPtP1Em3kEeZnK