testimonials 0.3.0 → 0.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 775e2f3be386fed634ac1dc381b5557e2ab6de931e0ee70bf31d7dedaa7aa1c5
-  data.tar.gz: 59115bcc0fcc2b7a882d94acf3bf1052396ef6cffc72c173fbfbc5928bc6f183
+  metadata.gz: eec2476402ec7e3a4d2c414cad340aae35a0456db87d65c950d527e983ab7053
+  data.tar.gz: a910019755bf56f04cdfc180c6706be9a1b6fe2246c481822a647610a63a53f5
 SHA512:
-  metadata.gz: 45d8c4d2c40d674d44a086be802101ba4ff30dde287da19e5f442b4c2f0bd54362221f98fbe2a5d854198778a587537fb2d4536509e4556d0f6d9d5f7ff14f99
-  data.tar.gz: 1ffbac4c4bc0cd7714545d365de849a4c6914c7ccfe5ea558dd33e6d1e480f5c268798c0b2249d6bf464636a0cd767d3622bbb487050c3125da9d97cbcbc01cc
+  metadata.gz: 84e12d4988eddabcba1ba473b7ddb92158674f34051fdf7005aae11171962b686621c81aade5121c33a700363422f1843183d6bb4d81c32123e2a84c757c51ee
+  data.tar.gz: 97731aaeffebf8bad9e02e44005a69d1507c99b46badda66735d3c4d5b756dbcb06eda88e10a3716d36ef13a82d9c3f962ac9993f0c2968e8d2bd39f8443b576

data/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 0.4.1
+
+- Video poster frames: a still is captured from the camera at record time and
+  shown via `<video poster>`, so recorded videos display a real thumbnail
+  instead of a black box in every browser (Safari won't paint a
+  fragmented-MP4 frame from the file itself). Served at `/:id/poster`,
+  exposed as `poster_url` in the API.
+
+## 0.4.0
+
+- Consent is now an explicit public/private choice instead of a single
+  checkbox: "You can use my testimonial publicly…" vs "…only privately in
+  your marketing and sales." Public maps to the existing `consent_given`
+  (served by the read API); private is stored, admin-visible, and never
+  public. No migration. Both choices snapshot their exact wording.
+  Localized in all 26 languages. (Locale key `testimonials.consent` was
+  replaced by `consent_prompt` / `consent_public` / `consent_private`; if you
+  overrode it, update your keys. `config.consent_text` now overrides the
+  public line.)
+
 ## 0.3.0
 
 - Reverted 0.2.0's API path change: the read API collection is back at

data/README.md

@@ -29,9 +29,9 @@ copy-paste examples included.
 - **NPS built in.** 0–10 with a comment; promoters (9–10) are immediately
   offered the testimonial form, detractors flow into `on_detractor` (pairs
   well with [feedback_engine](https://github.com/yshmarov/feedback-engine)).
-- **Consent is first-class.** A consent checkbox with a stored text snapshot;
-  the API only ever serves approved **and** consented records, and never
-  emails.
+- **Consent is first-class.** Customers choose public or private use in their
+  own words, with a stored text snapshot; the read API only ever serves
+  approved records marked for **public** use, and never emails.
 - **26 languages**, including localized best-practice guiding questions.
 
 ## How it works

data/app/controllers/testimonials/api/testimonials_controller.rb

@@ -33,7 +33,8 @@ module Testimonials
           featured: testimonial.featured?,
           created_at: testimonial.created_at.iso8601,
           avatar_url: (testimonial_avatar_url(testimonial) if testimonial.avatar_attached?),
-          video_url: (testimonial_video_url(testimonial) if testimonial.video_attached?)
+          video_url: (testimonial_video_url(testimonial) if testimonial.video_attached?),
+          poster_url: (testimonial_poster_url(testimonial) if testimonial.poster_attached?)
         }
       end
     end

data/app/controllers/testimonials/media_controller.rb

@@ -17,6 +17,12 @@ module Testimonials
       redirect_to main_app.rails_blob_path(@testimonial.video_file, disposition: disposition)
     end
 
+    def poster
+      head :not_found and return unless @testimonial.poster_attached?
+
+      redirect_to main_app.rails_blob_path(@testimonial.poster, disposition: disposition)
+    end
+
     def avatar
       head :not_found and return unless @testimonial.avatar_attached?
 

data/app/controllers/testimonials/testimonials_controller.rb

@@ -55,7 +55,10 @@ module Testimonials
       if testimonial.save
         # Purge only after a valid save, so a failed update can't strand a
         # review with its video already gone.
-        testimonial.video_file.purge if remove_video? && testimonial.video_attached?
+        if remove_video? && testimonial.video_attached?
+          testimonial.video_file.purge
+          testimonial.poster.purge if testimonial.poster_attached?
+        end
         record_submission
         notify_host(testimonial)
         head :created
@@ -101,7 +104,7 @@ module Testimonials
       end
       testimonial.kind = wants_video?(testimonial) ? 'video' : 'text'
       testimonial.source = 'widget' unless Testimonial::SOURCES.include?(testimonial.source)
-      testimonial.consent_text = testimonial.consent_given? ? Testimonials.consent_text : nil
+      testimonial.consent_text = Testimonials.consent_text_for(testimonial.consent_given?)
       testimonial.locale = I18n.locale.to_s
       testimonial.user_agent = request.user_agent
       attribute_author(testimonial)
@@ -154,9 +157,27 @@ module Testimonials
       return error_label(:error_save) unless file.content_type.to_s.start_with?('video/', 'audio/')
 
       testimonial.video_file.attach(file)
+      attach_poster(testimonial)
       nil
     end
 
+    # The poster rides with a new video upload. It's best-effort — a missing
+    # or malformed poster never blocks the testimonial. Attaching replaces any
+    # previous poster; a new video with no usable poster (e.g. an uploaded
+    # file, which we can't frame-grab) drops the stale one so it can't show a
+    # thumbnail from the wrong video.
+    def attach_poster(testimonial)
+      file = params.dig(:testimonial, :poster)
+      usable = file.present? && file.content_type.to_s.start_with?('image/') &&
+               file.size <= Testimonials.config.max_avatar_size
+
+      if usable
+        testimonial.poster.attach(file)
+      elsif testimonial.poster_attached?
+        testimonial.poster.purge
+      end
+    end
+
     def attach_avatar(testimonial)
       file = params.dig(:testimonial, :avatar)
       return nil if file.blank?

data/app/models/testimonials/testimonial.rb

@@ -11,6 +11,7 @@ module Testimonials
 
     if defined?(::ActiveStorage)
       has_one_attached :video_file
+      has_one_attached :poster # a still frame for the video, captured at record time
       has_one_attached :avatar
     end
 
@@ -37,6 +38,10 @@ module Testimonials
       respond_to?(:video_file) && video_file.attached?
     end
 
+    def poster_attached?
+      respond_to?(:poster) && poster.attached?
+    end
+
     def avatar_attached?
       respond_to?(:avatar) && avatar.attached?
     end

data/app/views/testimonials/testimonials/show.html.erb

@@ -17,10 +17,11 @@
 
 <div class="card pad" style="margin-bottom: 16px;">
   <% if @testimonial.video_attached? %>
-    <%# No #t=0.1 fragment: MediaRecorder webm has no seek index, and
-        Firefox honors media fragments literally — the pending seek stalls
-        playback right after play. preload="metadata" paints the frame. %>
+    <%# The stored poster shows a real frame with no decoding — Safari won't
+        paint a fragmented-MP4 frame on its own, so preload/fragment tricks
+        leave it black. %>
     <video class="playback" controls preload="metadata"
+           poster="<%= testimonial_poster_path(@testimonial) if @testimonial.poster_attached? %>"
            src="<%= testimonial_video_path(@testimonial) %>"></video>
     <p class="muted">
       <%= link_to "⬇ #{t('testimonials.dashboard.download_video', default: 'Download video')}",
@@ -68,7 +69,8 @@
       <% if @testimonial.consent_given? %>
         ✓ <span class="muted"><%= @testimonial.consent_text %></span>
       <% else %>
-        — <span class="muted"><%= t('testimonials.dashboard.no_consent', default: 'No publication consent. Not served by the API.') %></span>
+        🔒 <span class="muted"><%= @testimonial.consent_text.presence ||
+              t('testimonials.dashboard.no_consent', default: 'Private use only. Not served by the read API.') %></span>
       <% end %>
     </dd>
     <dt><%= t('testimonials.dashboard.source', default: 'Source') %></dt>

data/config/locales/testimonials.ar.yml

@@ -4,7 +4,9 @@ ar:
       - "من أنت وكيف تستخدم %{app}؟"
       - "كيف ساعدك %{app}؟"
       - "ما أفضل ما في %{app}؟"
-    consent: "أسمح باستخدام هذه الشهادة عبر وسائل التواصل الاجتماعي وجهود تسويقية أخرى."
+    consent_prompt: "أين يمكننا استخدام شهادتك؟"
+    consent_public: "يمكنكم استخدام شهادتي علنًا في التسويق والمبيعات."
+    consent_private: "يمكنكم استخدام شهادتي في التسويق والمبيعات بشكل خاص فقط."
     cta: "اترك تقييمًا"
     update_title: "حدِّث تقييمك"
     enjoying: "هل يعجبك %{app}؟"
@@ -71,7 +73,7 @@ ar:
       testimonial: "الشهادة"
       from: "من"
       consent: "الموافقة"
-      no_consent: "لا موافقة على النشر. لا تُقدَّم عبر واجهة البرمجة."
+      no_consent: "للاستخدام الخاص فقط. لا تُقدَّم عبر واجهة القراءة البرمجية."
       received: "تاريخ الاستلام"
       featured: "مميّز"
       approve: "اعتماد"

data/config/locales/testimonials.bg.yml

@@ -4,7 +4,9 @@ bg:
       - "Кой сте вие и как използвате %{app}?"
       - "Как %{app} ви помогна?"
       - "Кое е най-хубавото на %{app}?"
-    consent: "Разрешавам този отзив да се използва в социалните мрежи и други маркетингови дейности."
+    consent_prompt: "Къде можем да използваме вашия отзив?"
+    consent_public: "Можете да използвате моя отзив публично в маркетинга и продажбите си."
+    consent_private: "Можете да използвате моя отзив само частно в маркетинга и продажбите си."
     cta: "Оставете отзив"
     update_title: "Обновете отзива си"
     enjoying: "Харесва ли ви %{app}?"
@@ -71,7 +73,7 @@ bg:
       testimonial: "Отзив"
       from: "От"
       consent: "Съгласие"
-      no_consent: "Няма съгласие за публикуване. Не се предоставя през API."
+      no_consent: "Само за лична употреба. Не се предоставя през API за четене."
       received: "Получено"
       featured: "Избрано"
       approve: "Одобри"

data/config/locales/testimonials.bn.yml

@@ -4,7 +4,9 @@ bn:
       - "আপনি কে এবং কীভাবে %{app} ব্যবহার করেন?"
       - "%{app} আপনাকে কীভাবে সাহায্য করেছে?"
       - "%{app}-এর সবচেয়ে ভালো দিক কী?"
-    consent: "আমি এই প্রশংসাপত্রটি সোশ্যাল মিডিয়া ও অন্যান্য মার্কেটিং কাজে ব্যবহারের অনুমতি দিচ্ছি।"
+    consent_prompt: "আমরা আপনার প্রশংসাপত্র কোথায় ব্যবহার করতে পারি?"
+    consent_public: "আপনি আমার প্রশংসাপত্র আপনার মার্কেটিং ও সেলসে প্রকাশ্যে ব্যবহার করতে পারেন।"
+    consent_private: "আপনি আমার প্রশংসাপত্র আপনার মার্কেটিং ও সেলসে শুধু ব্যক্তিগতভাবে ব্যবহার করতে পারেন।"
     cta: "রিভিউ লিখুন"
     update_title: "আপনার রিভিউ আপডেট করুন"
     enjoying: "%{app} ভালো লাগছে?"
@@ -71,7 +73,7 @@ bn:
       testimonial: "প্রশংসাপত্র"
       from: "প্রেরক"
       consent: "সম্মতি"
-      no_consent: "প্রকাশের সম্মতি নেই। API দিয়ে দেওয়া হয় না।"
+      no_consent: "শুধু ব্যক্তিগত ব্যবহারের জন্য। রিড API দিয়ে দেওয়া হয় না।"
       received: "গৃহীত"
       featured: "বিশেষ"
       approve: "অনুমোদন"

data/config/locales/testimonials.de.yml

@@ -4,7 +4,9 @@ de:
       - "Wer sind Sie und wie nutzen Sie %{app}?"
       - "Wie hat %{app} Ihnen geholfen?"
       - "Was ist das Beste an %{app}?"
-    consent: "Ich erlaube die Verwendung dieses Erfahrungsberichts in sozialen Medien und für andere Marketingzwecke."
+    consent_prompt: "Wo dürfen wir Ihren Erfahrungsbericht verwenden?"
+    consent_public: "Sie dürfen meinen Erfahrungsbericht öffentlich in Ihrem Marketing und Vertrieb verwenden."
+    consent_private: "Sie dürfen meinen Erfahrungsbericht nur privat in Ihrem Marketing und Vertrieb verwenden."
     cta: "Bewertung abgeben"
     update_title: "Ihre Bewertung aktualisieren"
     enjoying: "Gefällt Ihnen %{app}?"
@@ -71,7 +73,7 @@ de:
       testimonial: "Erfahrungsbericht"
       from: "Von"
       consent: "Einwilligung"
-      no_consent: "Keine Veröffentlichungs-Einwilligung. Wird nicht über die API ausgeliefert."
+      no_consent: "Nur zur privaten Nutzung. Wird nicht über die Lese-API ausgeliefert."
       received: "Eingegangen"
       featured: "Hervorgehoben"
       approve: "Freigeben"

data/config/locales/testimonials.el.yml

@@ -4,7 +4,9 @@ el:
       - "Ποιοι είστε και πώς χρησιμοποιείτε το %{app};"
       - "Πώς σας βοήθησε το %{app};"
       - "Ποιο είναι το καλύτερο στοιχείο του %{app};"
-    consent: "Επιτρέπω τη χρήση αυτής της μαρτυρίας στα social media και σε άλλες ενέργειες μάρκετινγκ."
+    consent_prompt: "Πού μπορούμε να χρησιμοποιήσουμε τη μαρτυρία σας;"
+    consent_public: "Μπορείτε να χρησιμοποιήσετε τη μαρτυρία μου δημόσια στο μάρκετινγκ και τις πωλήσεις σας."
+    consent_private: "Μπορείτε να χρησιμοποιήσετε τη μαρτυρία μου μόνο ιδιωτικά στο μάρκετινγκ και τις πωλήσεις σας."
     cta: "Αφήστε μια κριτική"
     update_title: "Ενημερώστε την κριτική σας"
     enjoying: "Σας αρέσει το %{app};"
@@ -71,7 +73,7 @@ el:
       testimonial: "Μαρτυρία"
       from: "Από"
       consent: "Συγκατάθεση"
-      no_consent: "Χωρίς συγκατάθεση δημοσίευσης. Δεν σερβίρεται από το API."
+      no_consent: "Μόνο για ιδιωτική χρήση. Δεν σερβίρεται από το API ανάγνωσης."
       received: "Ελήφθη"
       featured: "Προβεβλημένο"
       approve: "Έγκριση"

data/config/locales/testimonials.en.yml

@@ -4,7 +4,9 @@ en:
       - "Who are you, and how do you use %{app}?"
       - "How has %{app} helped you?"
       - "What is the best thing about %{app}?"
-    consent: "I give permission to use this testimonial across social channels and other marketing efforts."
+    consent_prompt: "Where can we use your testimonial?"
+    consent_public: "You can use my testimonial publicly in your marketing and sales."
+    consent_private: "You can only use my testimonial privately in your marketing and sales."
     cta: "Leave a review"
     update_title: "Update your review"
     enjoying: "Enjoying %{app}?"
@@ -71,7 +73,7 @@ en:
       testimonial: "Testimonial"
       from: "From"
       consent: "Consent"
-      no_consent: "No publication consent. Not served by the API."
+      no_consent: "Private use only. Not served by the read API."
       received: "Received"
       featured: "Featured"
       approve: "Approve"

data/config/locales/testimonials.es.yml

@@ -4,7 +4,9 @@ es:
       - "¿Quién eres y cómo usas %{app}?"
       - "¿Cómo te ha ayudado %{app}?"
       - "¿Qué es lo mejor de %{app}?"
-    consent: "Doy permiso para usar este testimonio en redes sociales y otras acciones de marketing."
+    consent_prompt: "¿Dónde podemos usar tu testimonio?"
+    consent_public: "Puedes usar mi testimonio públicamente en tu marketing y ventas."
+    consent_private: "Solo puedes usar mi testimonio de forma privada en tu marketing y ventas."
     cta: "Dejar una reseña"
     update_title: "Actualizar tu reseña"
     enjoying: "¿Te gusta %{app}?"
@@ -71,7 +73,7 @@ es:
       testimonial: "Testimonio"
       from: "De"
       consent: "Consentimiento"
-      no_consent: "Sin consentimiento de publicación. No se sirve por la API."
+      no_consent: "Solo para uso privado. No se sirve por la API de lectura."
       received: "Recibido"
       featured: "Destacado"
       approve: "Aprobar"

data/config/locales/testimonials.fr.yml

@@ -4,7 +4,9 @@ fr:
       - "Qui êtes-vous et comment utilisez-vous %{app} ?"
       - "Comment %{app} vous a-t-il aidé ?"
       - "Quelle est la meilleure chose à propos de %{app} ?"
-    consent: "J'autorise l'utilisation de ce témoignage sur les réseaux sociaux et dans d'autres actions marketing."
+    consent_prompt: "Où pouvons-nous utiliser votre témoignage ?"
+    consent_public: "Vous pouvez utiliser mon témoignage publiquement dans votre marketing et vos ventes."
+    consent_private: "Vous pouvez utiliser mon témoignage uniquement en privé dans votre marketing et vos ventes."
     cta: "Laisser un avis"
     update_title: "Mettre à jour votre avis"
     enjoying: "Vous aimez %{app} ?"
@@ -71,7 +73,7 @@ fr:
       testimonial: "Témoignage"
       from: "De"
       consent: "Consentement"
-      no_consent: "Pas de consentement à la publication. Non servi par l'API."
+      no_consent: "Usage privé uniquement. Non servi par l'API de lecture."
       received: "Reçu"
       featured: "Mis en avant"
       approve: "Approuver"

data/config/locales/testimonials.hi.yml

@@ -4,7 +4,9 @@ hi:
       - "आप कौन हैं और %{app} का उपयोग कैसे करते हैं?"
       - "%{app} ने आपकी कैसे मदद की?"
       - "%{app} की सबसे अच्छी बात क्या है?"
-    consent: "मैं इस प्रशंसापत्र को सोशल मीडिया और अन्य मार्केटिंग प्रयासों में उपयोग करने की अनुमति देता/देती हूँ।"
+    consent_prompt: "हम आपका प्रशंसापत्र कहाँ उपयोग कर सकते हैं?"
+    consent_public: "आप मेरा प्रशंसापत्र अपनी मार्केटिंग और बिक्री में सार्वजनिक रूप से उपयोग कर सकते हैं।"
+    consent_private: "आप मेरा प्रशंसापत्र अपनी मार्केटिंग और बिक्री में केवल निजी रूप से उपयोग कर सकते हैं।"
     cta: "समीक्षा लिखें"
     update_title: "अपनी समीक्षा अपडेट करें"
     enjoying: "%{app} पसंद आ रहा है?"
@@ -71,7 +73,7 @@ hi:
       testimonial: "प्रशंसापत्र"
       from: "किससे"
       consent: "सहमति"
-      no_consent: "प्रकाशन की सहमति नहीं। API से नहीं दिया जाता।"
+      no_consent: "केवल निजी उपयोग के लिए। रीड API से नहीं दिया जाता।"
       received: "प्राप्त"
       featured: "विशेष"
       approve: "स्वीकृत करें"

data/config/locales/testimonials.hr.yml

@@ -4,7 +4,9 @@ hr:
       - "Tko ste i kako koristite %{app}?"
       - "Kako vam je %{app} pomogao?"
       - "Što je najbolje kod %{app}?"
-    consent: "Dajem dopuštenje da se ovaj osvrt koristi na društvenim mrežama i u drugim marketinškim aktivnostima."
+    consent_prompt: "Gdje možemo koristiti vaš osvrt?"
+    consent_public: "Moj osvrt možete javno koristiti u svom marketingu i prodaji."
+    consent_private: "Moj osvrt možete koristiti samo privatno u svom marketingu i prodaji."
     cta: "Ostavite recenziju"
     update_title: "Ažurirajte svoju recenziju"
     enjoying: "Sviđa li vam se %{app}?"
@@ -71,7 +73,7 @@ hr:
       testimonial: "Osvrt"
       from: "Od"
       consent: "Privola"
-      no_consent: "Nema privole za objavu. Ne poslužuje se putem API-ja."
+      no_consent: "Samo za privatnu upotrebu. Ne poslužuje se putem API-ja za čitanje."
       received: "Zaprimljeno"
       featured: "Istaknuto"
       approve: "Odobri"

data/config/locales/testimonials.id.yml

@@ -4,7 +4,9 @@ id:
       - "Siapa Anda dan bagaimana Anda menggunakan %{app}?"
       - "Bagaimana %{app} membantu Anda?"
       - "Apa hal terbaik dari %{app}?"
-    consent: "Saya mengizinkan testimoni ini digunakan di media sosial dan upaya pemasaran lainnya."
+    consent_prompt: "Di mana kami boleh menggunakan testimoni Anda?"
+    consent_public: "Anda boleh menggunakan testimoni saya secara publik dalam pemasaran dan penjualan Anda."
+    consent_private: "Anda hanya boleh menggunakan testimoni saya secara pribadi dalam pemasaran dan penjualan Anda."
     cta: "Tulis ulasan"
     update_title: "Perbarui ulasan Anda"
     enjoying: "Suka dengan %{app}?"
@@ -71,7 +73,7 @@ id:
       testimonial: "Testimoni"
       from: "Dari"
       consent: "Persetujuan"
-      no_consent: "Tanpa persetujuan publikasi. Tidak disajikan lewat API."
+      no_consent: "Hanya untuk penggunaan pribadi. Tidak disajikan oleh API baca."
       received: "Diterima"
       featured: "Unggulan"
       approve: "Setujui"

data/config/locales/testimonials.it.yml

@@ -4,7 +4,9 @@ it:
       - "Chi sei e come usi %{app}?"
       - "In che modo %{app} ti ha aiutato?"
       - "Qual è la cosa migliore di %{app}?"
-    consent: "Autorizzo l'uso di questa testimonianza sui social e in altre attività di marketing."
+    consent_prompt: "Dove possiamo usare la tua testimonianza?"
+    consent_public: "Puoi usare la mia testimonianza pubblicamente nel tuo marketing e nelle tue vendite."
+    consent_private: "Puoi usare la mia testimonianza solo privatamente nel tuo marketing e nelle tue vendite."
     cta: "Lascia una recensione"
     update_title: "Aggiorna la tua recensione"
     enjoying: "Ti piace %{app}?"
@@ -71,7 +73,7 @@ it:
       testimonial: "Testimonianza"
       from: "Da"
       consent: "Consenso"
-      no_consent: "Nessun consenso alla pubblicazione. Non servito dall'API."
+      no_consent: "Solo per uso privato. Non servito dall'API di lettura."
       received: "Ricevuto"
       featured: "In evidenza"
       approve: "Approva"

data/config/locales/testimonials.ja.yml

@@ -4,7 +4,9 @@ ja:
       - "あなたはどなたで、%{app}をどのように使っていますか？"
       - "%{app}はどのように役立ちましたか？"
       - "%{app}の一番良いところは何ですか？"
-    consent: "この声をSNSやその他のマーケティング活動で使用することを許可します。"
+    consent_prompt: "この声をどこで使ってよいですか？"
+    consent_public: "私の声をマーケティングや販売で公開して使ってかまいません。"
+    consent_private: "私の声はマーケティングや販売で非公開にのみ使ってください。"
     cta: "レビューを書く"
     update_title: "レビューを更新する"
     enjoying: "%{app}を気に入っていますか？"
@@ -71,7 +73,7 @@ ja:
       testimonial: "お客様の声"
       from: "投稿者"
       consent: "同意"
-      no_consent: "公開への同意なし。APIでは配信されません。"
+      no_consent: "非公開利用のみ。読み取りAPIでは配信されません。"
       received: "受信日時"
       featured: "注目"
       approve: "承認"

data/config/locales/testimonials.ko.yml

@@ -4,7 +4,9 @@ ko:
       - "당신은 누구이며 %{app}을(를) 어떻게 사용하시나요?"
       - "%{app}이(가) 어떻게 도움이 되었나요?"
       - "%{app}의 가장 좋은 점은 무엇인가요?"
-    consent: "이 후기를 소셜 미디어 및 기타 마케팅 활동에 사용하는 것을 허락합니다."
+    consent_prompt: "귀하의 후기를 어디에 사용해도 될까요?"
+    consent_public: "제 후기를 마케팅과 영업에 공개적으로 사용하셔도 됩니다."
+    consent_private: "제 후기를 마케팅과 영업에 비공개로만 사용하셔도 됩니다."
     cta: "리뷰 남기기"
     update_title: "리뷰 수정하기"
     enjoying: "%{app}이(가) 마음에 드시나요?"
@@ -71,7 +73,7 @@ ko:
       testimonial: "후기"
       from: "보낸 사람"
       consent: "동의"
-      no_consent: "게시 동의 없음. API로 제공되지 않습니다."
+      no_consent: "비공개 사용 전용. 읽기 API로 제공되지 않습니다."
       received: "받은 시각"
       featured: "추천"
       approve: "승인"

data/config/locales/testimonials.lb.yml

@@ -4,7 +4,9 @@ lb:
       - "Wien sidd Dir a wéi benotzt Dir %{app}?"
       - "Wéi huet %{app} Iech gehollef?"
       - "Wat ass dat Bescht un %{app}?"
-    consent: "Ech ginn d'Erlaabnis, dësen Temoignage op soziale Medien an an anere Marketingaktivitéiten ze benotzen."
+    consent_prompt: "Wou kënne mir Ären Temoignage benotzen?"
+    consent_public: "Dir kënnt mäin Temoignage ëffentlech an Ärem Marketing an Äre Verkeef benotzen."
+    consent_private: "Dir kënnt mäin Temoignage nëmme privat an Ärem Marketing an Äre Verkeef benotzen."
     cta: "Eng Bewäertung hannerloossen"
     update_title: "Är Bewäertung aktualiséieren"
     enjoying: "Gefällt Iech %{app}?"
@@ -71,7 +73,7 @@ lb:
       testimonial: "Temoignage"
       from: "Vun"
       consent: "Averständnis"
-      no_consent: "Keen Averständnis fir d'Publikatioun. Gëtt net iwwer d'API servéiert."
+      no_consent: "Nëmme fir privaten Asaz. Gëtt net iwwer d'Lies-API servéiert."
       received: "Erakritt"
       featured: "Ervirgehuewen"
       approve: "Guttheeschen"

data/config/locales/testimonials.nl.yml

@@ -4,7 +4,9 @@ nl:
       - "Wie ben je en hoe gebruik je %{app}?"
       - "Hoe heeft %{app} je geholpen?"
       - "Wat is het beste aan %{app}?"
-    consent: "Ik geef toestemming om deze testimonial te gebruiken op sociale media en voor andere marketingdoeleinden."
+    consent_prompt: "Waar mogen we je testimonial gebruiken?"
+    consent_public: "Je mag mijn testimonial openbaar gebruiken in je marketing en verkoop."
+    consent_private: "Je mag mijn testimonial alleen privé gebruiken in je marketing en verkoop."
     cta: "Laat een review achter"
     update_title: "Werk je review bij"
     enjoying: "Bevalt %{app} je?"
@@ -71,7 +73,7 @@ nl:
       testimonial: "Testimonial"
       from: "Van"
       consent: "Toestemming"
-      no_consent: "Geen publicatietoestemming. Niet geserveerd door de API."
+      no_consent: "Alleen voor privégebruik. Niet geserveerd door de lees-API."
       received: "Ontvangen"
       featured: "Uitgelicht"
       approve: "Goedkeuren"

data/config/locales/testimonials.pl.yml

@@ -4,7 +4,9 @@ pl:
       - "Kim jesteś i jak korzystasz z %{app}?"
       - "Jak %{app} Ci pomogło?"
       - "Co jest najlepsze w %{app}?"
-    consent: "Wyrażam zgodę na wykorzystanie tej opinii w mediach społecznościowych i innych działaniach marketingowych."
+    consent_prompt: "Gdzie możemy wykorzystać Twoją opinię?"
+    consent_public: "Możesz publicznie wykorzystać moją opinię w swoim marketingu i sprzedaży."
+    consent_private: "Możesz wykorzystać moją opinię wyłącznie prywatnie w swoim marketingu i sprzedaży."
     cta: "Zostaw opinię"
     update_title: "Zaktualizuj swoją opinię"
     enjoying: "Podoba Ci się %{app}?"
@@ -71,7 +73,7 @@ pl:
       testimonial: "Opinia"
       from: "Od"
       consent: "Zgoda"
-      no_consent: "Brak zgody na publikację. Nie serwowane przez API."
+      no_consent: "Tylko do użytku prywatnego. Nie serwowane przez API odczytu."
       received: "Otrzymano"
       featured: "Wyróżnione"
       approve: "Zatwierdź"

data/config/locales/testimonials.pt.yml

@@ -4,7 +4,9 @@ pt:
       - "Quem é você e como usa %{app}?"
       - "Como %{app} ajudou você?"
       - "Qual é a melhor coisa de %{app}?"
-    consent: "Autorizo o uso deste depoimento em redes sociais e outras ações de marketing."
+    consent_prompt: "Onde podemos usar o seu depoimento?"
+    consent_public: "Você pode usar o meu depoimento publicamente no seu marketing e vendas."
+    consent_private: "Você só pode usar o meu depoimento de forma privada no seu marketing e vendas."
     cta: "Deixar uma avaliação"
     update_title: "Atualizar sua avaliação"
     enjoying: "Está gostando de %{app}?"
@@ -71,7 +73,7 @@ pt:
       testimonial: "Depoimento"
       from: "De"
       consent: "Consentimento"
-      no_consent: "Sem consentimento de publicação. Não servido pela API."
+      no_consent: "Apenas para uso privado. Não servido pela API de leitura."
       received: "Recebido"
       featured: "Destacado"
       approve: "Aprovar"

data/config/locales/testimonials.ro.yml

@@ -4,7 +4,9 @@ ro:
       - "Cine sunteți și cum folosiți %{app}?"
       - "Cum v-a ajutat %{app}?"
       - "Care este cel mai bun lucru la %{app}?"
-    consent: "Îmi dau acordul ca acest testimonial să fie folosit pe rețelele sociale și în alte acțiuni de marketing."
+    consent_prompt: "Unde putem folosi testimonialul tău?"
+    consent_public: "Poți folosi testimonialul meu public în marketingul și vânzările tale."
+    consent_private: "Poți folosi testimonialul meu doar privat în marketingul și vânzările tale."
     cta: "Lasă o recenzie"
     update_title: "Actualizează-ți recenzia"
     enjoying: "Vă place %{app}?"
@@ -71,7 +73,7 @@ ro:
       testimonial: "Testimonial"
       from: "De la"
       consent: "Consimțământ"
-      no_consent: "Fără consimțământ de publicare. Nu este servit de API."
+      no_consent: "Doar pentru uz privat. Nu este servit de API-ul de citire."
       received: "Primit"
       featured: "Evidențiat"
       approve: "Aprobă"

data/config/locales/testimonials.ru.yml

@@ -4,7 +4,9 @@ ru:
       - "Кто вы и как вы используете %{app}?"
       - "Как %{app} вам помог?"
       - "Что самое лучшее в %{app}?"
-    consent: "Я разрешаю использовать этот отзыв в соцсетях и других маркетинговых материалах."
+    consent_prompt: "Где мы можем использовать ваш отзыв?"
+    consent_public: "Вы можете публично использовать мой отзыв в маркетинге и продажах."
+    consent_private: "Вы можете использовать мой отзыв только конфиденциально в маркетинге и продажах."
     cta: "Оставить отзыв"
     update_title: "Обновить ваш отзыв"
     enjoying: "Нравится %{app}?"
@@ -71,7 +73,7 @@ ru:
       testimonial: "Отзыв"
       from: "От"
       consent: "Согласие"
-      no_consent: "Нет согласия на публикацию. Не отдаётся через API."
+      no_consent: "Только для личного использования. Не отдаётся через API чтения."
       received: "Получено"
       featured: "Избранное"
       approve: "Одобрить"

data/config/locales/testimonials.th.yml

@@ -4,7 +4,9 @@ th:
       - "คุณคือใคร และใช้ %{app} อย่างไร?"
       - "%{app} ช่วยคุณอย่างไรบ้าง?"
       - "สิ่งที่ดีที่สุดของ %{app} คืออะไร?"
-    consent: "ฉันอนุญาตให้ใช้คำรับรองนี้บนโซเชียลมีเดียและกิจกรรมการตลาดอื่น ๆ"
+    consent_prompt: "เราสามารถใช้คำรับรองของคุณได้ที่ไหนบ้าง"
+    consent_public: "คุณสามารถใช้คำรับรองของฉันแบบสาธารณะในการตลาดและการขายของคุณได้"
+    consent_private: "คุณสามารถใช้คำรับรองของฉันแบบส่วนตัวเท่านั้นในการตลาดและการขายของคุณ"
     cta: "เขียนรีวิว"
     update_title: "อัปเดตรีวิวของคุณ"
     enjoying: "ชอบ %{app} ไหม?"
@@ -71,7 +73,7 @@ th:
       testimonial: "คำรับรอง"
       from: "จาก"
       consent: "ความยินยอม"
-      no_consent: "ไม่มีความยินยอมให้เผยแพร่ จะไม่ถูกส่งผ่าน API"
+      no_consent: "สำหรับใช้งานส่วนตัวเท่านั้น จะไม่ถูกส่งผ่าน API สำหรับอ่าน"
       received: "ได้รับเมื่อ"
       featured: "แนะนำ"
       approve: "อนุมัติ"

data/config/locales/testimonials.tr.yml

@@ -4,7 +4,9 @@ tr:
       - "Kimsiniz ve %{app} uygulamasını nasıl kullanıyorsunuz?"
       - "%{app} size nasıl yardımcı oldu?"
       - "%{app} uygulamasının en iyi yanı nedir?"
-    consent: "Bu yorumun sosyal medyada ve diğer pazarlama çalışmalarında kullanılmasına izin veriyorum."
+    consent_prompt: "Yorumunuzu nerede kullanabiliriz?"
+    consent_public: "Yorumumu pazarlama ve satışlarınızda herkese açık şekilde kullanabilirsiniz."
+    consent_private: "Yorumumu pazarlama ve satışlarınızda yalnızca özel olarak kullanabilirsiniz."
     cta: "Yorum bırak"
     update_title: "Yorumunuzu güncelleyin"
     enjoying: "%{app} hoşunuza gidiyor mu?"
@@ -71,7 +73,7 @@ tr:
       testimonial: "Görüş"
       from: "Kimden"
       consent: "Onay"
-      no_consent: "Yayın onayı yok. API üzerinden sunulmaz."
+      no_consent: "Yalnızca özel kullanım. Okuma API'si üzerinden sunulmaz."
       received: "Alındı"
       featured: "Öne çıkan"
       approve: "Onayla"

data/config/locales/testimonials.uk.yml

@@ -4,7 +4,9 @@ uk:
       - "Хто ви і як ви використовуєте %{app}?"
       - "Як %{app} вам допоміг?"
       - "Що найкраще в %{app}?"
-    consent: "Я дозволяю використовувати цей відгук у соцмережах та інших маркетингових матеріалах."
+    consent_prompt: "Де ми можемо використати ваш відгук?"
+    consent_public: "Ви можете публічно використовувати мій відгук у своєму маркетингу та продажах."
+    consent_private: "Ви можете використовувати мій відгук лише приватно у своєму маркетингу та продажах."
     cta: "Залишити відгук"
     update_title: "Оновити ваш відгук"
     enjoying: "Подобається %{app}?"
@@ -71,7 +73,7 @@ uk:
       testimonial: "Відгук"
       from: "Від"
       consent: "Згода"
-      no_consent: "Немає згоди на публікацію. Не віддається через API."
+      no_consent: "Лише для приватного використання. Не віддається через API читання."
       received: "Отримано"
       featured: "Обране"
       approve: "Схвалити"

data/config/locales/testimonials.ur.yml

@@ -4,7 +4,9 @@ ur:
       - "آپ کون ہیں اور %{app} کیسے استعمال کرتے ہیں؟"
       - "%{app} نے آپ کی کیسے مدد کی؟"
       - "%{app} کی سب سے اچھی بات کیا ہے؟"
-    consent: "میں اس تعریفی کلمات کو سوشل میڈیا اور دیگر مارکیٹنگ سرگرمیوں میں استعمال کرنے کی اجازت دیتا/دیتی ہوں۔"
+    consent_prompt: "ہم آپ کے تعریفی کلمات کہاں استعمال کر سکتے ہیں؟"
+    consent_public: "آپ میرے تعریفی کلمات اپنی مارکیٹنگ اور سیلز میں عوامی طور پر استعمال کر سکتے ہیں۔"
+    consent_private: "آپ میرے تعریفی کلمات اپنی مارکیٹنگ اور سیلز میں صرف نجی طور پر استعمال کر سکتے ہیں۔"
     cta: "تبصرہ چھوڑیں"
     update_title: "اپنا تبصرہ اپ ڈیٹ کریں"
     enjoying: "%{app} پسند آ رہا ہے؟"
@@ -71,7 +73,7 @@ ur:
       testimonial: "تعریفی کلمات"
       from: "منجانب"
       consent: "رضامندی"
-      no_consent: "اشاعت کی رضامندی نہیں۔ API سے فراہم نہیں کیا جاتا۔"
+      no_consent: "صرف نجی استعمال کے لیے۔ پڑھنے والے API سے فراہم نہیں کیا جاتا۔"
       received: "موصول ہوا"
       featured: "نمایاں"
       approve: "منظور کریں"

data/config/locales/testimonials.vi.yml

@@ -4,7 +4,9 @@ vi:
       - "Bạn là ai và bạn dùng %{app} như thế nào?"
       - "%{app} đã giúp bạn ra sao?"
       - "Điều tuyệt nhất ở %{app} là gì?"
-    consent: "Tôi cho phép sử dụng cảm nhận này trên mạng xã hội và các hoạt động tiếp thị khác."
+    consent_prompt: "Chúng tôi có thể sử dụng cảm nhận của bạn ở đâu?"
+    consent_public: "Bạn có thể sử dụng cảm nhận của tôi công khai trong hoạt động tiếp thị và bán hàng."
+    consent_private: "Bạn chỉ có thể sử dụng cảm nhận của tôi một cách riêng tư trong hoạt động tiếp thị và bán hàng."
     cta: "Để lại đánh giá"
     update_title: "Cập nhật đánh giá của bạn"
     enjoying: "Bạn thích %{app} chứ?"
@@ -71,7 +73,7 @@ vi:
       testimonial: "Cảm nhận"
       from: "Từ"
       consent: "Sự đồng ý"
-      no_consent: "Chưa đồng ý công bố. Không được cung cấp qua API."
+      no_consent: "Chỉ dùng riêng tư. Không được cung cấp qua API đọc."
       received: "Đã nhận"
       featured: "Nổi bật"
       approve: "Duyệt"

data/config/locales/testimonials.zh-CN.yml

@@ -4,7 +4,9 @@ zh-CN:
       - "您是谁？您如何使用 %{app}？"
       - "%{app} 是如何帮助您的？"
       - "%{app} 最棒的地方是什么？"
-    consent: "我允许在社交媒体和其他营销活动中使用这条评价。"
+    consent_prompt: "我们可以在哪里使用您的评价？"
+    consent_public: "您可以在营销和销售中公开使用我的评价。"
+    consent_private: "您只能在营销和销售中私下使用我的评价。"
     cta: "写评价"
     update_title: "更新您的评价"
     enjoying: "喜欢 %{app} 吗？"
@@ -71,7 +73,7 @@ zh-CN:
       testimonial: "评价"
       from: "来自"
       consent: "授权"
-      no_consent: "未授权发布。API 不会提供此条。"
+      no_consent: "仅供私人使用。读取 API 不会提供此条。"
       received: "收到时间"
       featured: "精选"
       approve: "批准"

data/config/routes.rb

@@ -21,6 +21,7 @@ Testimonials::Engine.routes.draw do
 
   # Media by testimonial id, gated (admin, author, or public_api + publishable).
   get ':id/video', to: 'media#video', as: :testimonial_video, constraints: { id: /\d+/ }
+  get ':id/poster', to: 'media#poster', as: :testimonial_poster, constraints: { id: /\d+/ }
   get ':id/avatar', to: 'media#avatar', as: :testimonial_avatar, constraints: { id: /\d+/ }
 
   # Flat, human URLs: the mount path IS the resource. /testimonials is the

data/lib/generators/testimonials/install/templates/initializer.rb

@@ -46,9 +46,10 @@ Testimonials.configure do |config|
   # config.reprompt_after = 90.days
   # config.max_prompts = 3
 
-  # Consent line stored verbatim with each submission. nil = localized default:
-  # "I give permission to use this testimonial across social channels and
-  # other marketing efforts."
+  # The public-use consent line, stored verbatim when a customer picks
+  # "use publicly". nil = localized default ("You can use my testimonial
+  # publicly in your marketing and sales."). The private-use line is
+  # localized only (testimonials.consent_private).
   # config.consent_text = "..."
 
   # The standalone collection page at /testimonials/new — share it with customers

data/lib/testimonials/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Testimonials
-  VERSION = '0.3.0'
+  VERSION = '0.4.1'
 end

data/lib/testimonials/widget.js

@@ -163,6 +163,7 @@
     if (!overlay) return;
     stopMedia();
     if (state && state.playbackUrl) URL.revokeObjectURL(state.playbackUrl);
+    if (state && state.posterUrl) URL.revokeObjectURL(state.posterUrl);
     if (state && state.auto && !state.submitted) postEvent(state.kind, "dismissed");
     overlay.remove();
     overlay = null;
@@ -276,6 +277,7 @@
     state.body = config.existing.body || "";
     state.consent = !!config.existing.consent;
     state.existingVideoUrl = config.existing.videoUrl || null;
+    state.existingPosterUrl = config.existing.posterUrl || null;
   }
 
   // --- stage 2: the testimonial form ------------------------------------------
@@ -374,21 +376,35 @@
     return box;
   }
 
+  // Where may we use this? Public (shown in marketing, served by the read
+  // API) or private (kept for internal use only). Public is the default —
+  // someone leaving a testimonial usually expects it shown — but private is
+  // an equally-visible, graceful choice, not a buried opt-out.
   function consentField() {
-    var wrap = el("label", "tml-consent");
-    var checkbox = document.createElement("input");
-    checkbox.type = "checkbox";
-    checkbox.name = "consent";
-    // Pre-checked when editing a review that already granted consent, and
-    // kept across stage round trips — an update must never silently revoke
-    // (or invent) publication consent.
-    checkbox.checked = !!state.consent;
-    checkbox.addEventListener("change", function () { state.consent = checkbox.checked; });
-    wrap.appendChild(checkbox);
-    wrap.appendChild(el("span", null, config.consent));
+    var wrap = el("div", "tml-consent");
+    if (config.consent.prompt) wrap.appendChild(el("p", "tml-consent-prompt", config.consent.prompt));
+    // state.consent (a bool) survives stage round trips and reflects an
+    // edited review's existing choice; undefined on a new review means public.
+    wrap.appendChild(consentOption("public", config.consent.public, state.consent !== false));
+    wrap.appendChild(consentOption("private", config.consent.private, state.consent === false));
     return wrap;
   }
 
+  function consentOption(value, label, checked) {
+    var opt = el("label", "tml-consent-option");
+    var radio = document.createElement("input");
+    radio.type = "radio";
+    radio.name = "consent";
+    radio.value = value;
+    radio.checked = checked;
+    radio.addEventListener("change", function () {
+      if (radio.checked) state.consent = value === "public";
+    });
+    opt.appendChild(radio);
+    opt.appendChild(el("span", null, label));
+    return opt;
+  }
+
   // --- video ------------------------------------------------------------------
 
   function videoControl(form) {
@@ -409,12 +425,9 @@
       playback.controls = true;
       playback.playsInline = true;
       playback.preload = "metadata";
-      // No #t=0.1 fragment here either (see the review-stage comment):
-      // MediaRecorder webm has no seek index, and Firefox honors the
-      // fragment literally — the pending seek stalls playback a moment
-      // after play. preload="metadata" already paints the first frame in
-      // Chrome and Firefox; iOS shows the controls on a blank frame, which
-      // beats a player that pauses itself.
+      // The stored poster shows a real frame with no decoding — the reliable
+      // fix for Safari, which won't paint a fragmented-MP4 frame on its own.
+      if (state.existingPosterUrl) playback.poster = state.existingPosterUrl;
       playback.src = state.existingVideoUrl;
       wrap.appendChild(playback);
       wrap.appendChild(attachedVideoChip(form, wrap, playback, function () {
@@ -537,7 +550,7 @@
       runCountdown(countdown, 3, function () {
         start.hidden = true;
         stop.hidden = false;
-        beginRecording(timer, stop);
+        beginRecording(preview, timer, stop);
       });
     });
 
@@ -568,7 +581,7 @@
     }, 800);
   }
 
-  function beginRecording(timer, stop) {
+  function beginRecording(preview, timer, stop) {
     media.chunks = [];
     var recorder;
     try {
@@ -584,6 +597,12 @@
       // A teardown (Cancel, close) also stops the recorder — only a real
       // Finish, where this recorder is still the active one, goes to review.
       if (media.recorder !== recorder) return;
+      // Grab a poster frame from the still-live preview stream *before*
+      // showStage tears the camera down. Captured from the camera, never
+      // from the recorded blob — seeking Safari's own fragmented MP4 to
+      // paint a frame is exactly what fails (black or stall), so we store a
+      // real image and hand it to <video poster>, which needs no decoding.
+      capturePoster(preview);
       var type = recorder.mimeType || "video/webm";
       var blob = new Blob(media.chunks, { type: type.split(";")[0] });
       showStage(reviewStage(blob));
@@ -654,9 +673,13 @@
     state.playbackUrl = URL.createObjectURL(blob);
     // No #t=0.1 here, on purpose: seeking a blob of Safari's own fragmented
     // MP4 recording can stall the video track while audio keeps playing.
-    // The fragment-thumbnail trick is only for server-served files; a
-    // just-recorded clip gets played immediately anyway.
+    // The captured poster (below) shows a frame without any decoding.
     playback.src = state.playbackUrl;
+    if (state.posterBlob) {
+      if (state.posterUrl) URL.revokeObjectURL(state.posterUrl);
+      state.posterUrl = URL.createObjectURL(state.posterBlob);
+      playback.poster = state.posterUrl;
+    }
     stage.appendChild(playback);
 
     var error = el("p", "tml-error");
@@ -708,6 +731,24 @@
     media = { stream: null, recorder: null, chunks: [], timer: null };
   }
 
+  // Draw the current preview frame to a canvas *now* (synchronous, while the
+  // stream is live) and encode it as a JPEG poster. The canvas keeps the
+  // pixels, so the async toBlob is safe even after the camera stops.
+  function capturePoster(preview) {
+    try {
+      var w = preview.videoWidth;
+      var h = preview.videoHeight;
+      if (!w || !h) return;
+      var canvas = document.createElement("canvas");
+      canvas.width = w;
+      canvas.height = h;
+      canvas.getContext("2d").drawImage(preview, 0, 0, w, h);
+      canvas.toBlob(function (blob) {
+        if (state && blob) state.posterBlob = blob;
+      }, "image/jpeg", 0.8);
+    } catch (e) { /* poster is best-effort; a black frame is not fatal */ }
+  }
+
   // --- NPS ----------------------------------------------------------------------
 
   function npsStage() {
@@ -829,7 +870,8 @@
     var data = new FormData();
     data.append("testimonial[body]", body);
     if (state.rating) data.append("testimonial[rating]", state.rating);
-    data.append("testimonial[consent_given]", form.querySelector("input[name=consent]").checked ? "1" : "0");
+    data.append("testimonial[consent_given]",
+      form.querySelector("input[name=consent]:checked").value === "public" ? "1" : "0");
     data.append("testimonial[page_url]", window.location.href);
     data.append("testimonial[source]", state.source);
     ["name", "email", "title_company"].forEach(function (key) {
@@ -843,6 +885,9 @@
     if (state.videoBlob) {
       var extension = (state.videoBlob.type || "video/webm").indexOf("mp4") > -1 ? "mp4" : "webm";
       data.append("testimonial[video_file]", state.videoBlob, "testimonial." + extension);
+      // The poster frame captured at record time, so the stored video shows
+      // a real thumbnail instead of a black box in every browser.
+      if (state.posterBlob) data.append("testimonial[poster]", state.posterBlob, "poster.jpg");
     } else if (state.removeExistingVideo) {
       data.append("testimonial[remove_video]", "1");
     }
@@ -1012,8 +1057,10 @@
       "{width:100%;box-sizing:border-box;padding:8px;border:1px solid #d1d5db;border-radius:8px;",
       "background:inherit;color:inherit;font:inherit}",
       ".tml-stage textarea{resize:vertical}",
-      ".tml-consent{display:flex;gap:8px;align-items:flex-start;margin-bottom:12px;font-size:13px;cursor:pointer}",
-      ".tml-consent input{margin-top:3px}",
+      ".tml-consent{margin-bottom:12px;font-size:13px}",
+      ".tml-consent-prompt{margin:0 0 6px;font-weight:600}",
+      ".tml-consent-option{display:flex;gap:8px;align-items:flex-start;margin-bottom:6px;cursor:pointer}",
+      ".tml-consent-option input{margin-top:3px}",
       ".tml-error{color:#dc2626;margin:0 0 12px}",
       ".tml-hint{color:#6b7280;font-size:13px;margin:8px 0}",
       ".tml-actions{display:flex;justify-content:flex-end;gap:8px;flex-wrap:wrap}",

data/lib/testimonials/widget.rb

@@ -74,7 +74,11 @@ module Testimonials
           autoOpen: auto_open&.to_s,
           mode: mode.to_s,
           questions: Testimonials.questions,
-          consent: Testimonials.consent_text,
+          consent: {
+            prompt: t(:consent_prompt, 'Where can we use your testimonial?'),
+            public: Testimonials.consent_text,
+            private: Testimonials.consent_text_private
+          },
           # The signed-in user's current review, if any: the widget opens it
           # pre-filled for editing instead of starting a second one — rating,
           # text, consent state, and a playable URL for an attached video.
@@ -82,7 +86,8 @@ module Testimonials
             rating: existing.rating,
             body: existing.body,
             consent: existing.consent_given ? true : false,
-            videoUrl: existing_video_url(existing)
+            videoUrl: existing_video_url(existing),
+            posterUrl: existing_poster_url(existing)
           },
           video: {
             enabled: config.video_enabled?,
@@ -108,6 +113,12 @@ module Testimonials
         "#{Testimonials.config.mount_path.chomp('/')}/#{existing.id}/video"
       end
 
+      def existing_poster_url(existing)
+        return unless existing.poster_attached?
+
+        "#{Testimonials.config.mount_path.chomp('/')}/#{existing.id}/poster"
+      end
+
       # Every user-facing string in the widget, resolved through Rails I18n so
       # the form follows the app's current locale. Each lookup carries an
       # English default, so the widget stays fully worded even when a key is

data/lib/testimonials.rb

@@ -49,11 +49,23 @@ module Testimonials
       Array(list).map { |q| q.to_s.gsub('%{app}', app_name) }
     end
 
+    # The public-use consent line, stored verbatim when a customer allows
+    # their testimonial to be shown publicly. Override with config.consent_text.
     def consent_text
       config.consent_text.presence ||
-        I18n.t('testimonials.consent',
-               default: 'I give permission to use this testimonial across social channels ' \
-                        'and other marketing efforts.')
+        I18n.t('testimonials.consent_public',
+               default: 'You can use my testimonial publicly in your marketing and sales.')
+    end
+
+    # The private-use line, stored when a customer allows only internal use.
+    def consent_text_private
+      I18n.t('testimonials.consent_private',
+             default: 'You can only use my testimonial privately in your marketing and sales.')
+    end
+
+    # The exact line the customer agreed to, given their public/private choice.
+    def consent_text_for(public_use)
+      public_use ? consent_text : consent_text_private
     end
 
     private

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: testimonials
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.1
 platform: ruby
 authors:
 - Yaroslav Shmarov