@orangecheck/legal 0.7.17 → 0.7.19

package/dist/index.js

@@ -876,7 +876,7 @@ var terms2 = {
   metaTitle: "Terms of Service \u2014 ochk.app",
   metaDescription: "Terms of service for ochk.app: a Bitcoin-backed identity that pays users in sats. OrangeCheck custody during bring-up, federation custody and self-custody graduation as the destination, no KYC.",
   effective: "2026-05-15",
-  updated: "2026-10-19",
+  updated: "2026-10-24",
   preamble: [
     {
       kind: "callout",
@@ -989,7 +989,7 @@ var terms2 = {
       blocks: [
         {
           kind: "para",
-          text: "Sites that integrate ochk.app through its API at me.ochk.io receive a **per-integrator scoped identifier** for you, not your master identity \u2014 they cannot correlate you across sites unless you explicitly grant a scope. Integrators independently decide whether and how to trust your identity, including whether to admit, gate, or reject you. OrangeCheck is not a party to, and accepts no liability for, an integrator\u2019s decisions or an integrator\u2019s own terms, pricing, or conduct."
+          text: "Sites that integrate ochk.app through its API at me.ochk.io get their own subject id for the events they report, and your Bitcoin address, email or attestation tier only if you grant that scope. Signing in gives every site the same orangecheck id (did:oc), so sites that compare ids can tell it is you. Integrators independently decide whether and how to trust your identity, including whether to admit, gate, or reject you. OrangeCheck is not a party to, and accepts no liability for, an integrator\u2019s decisions or an integrator\u2019s own terms, pricing, or conduct."
         }
       ]
     },
@@ -1037,11 +1037,11 @@ var privacy2 = {
   kind: "privacy",
   eyebrow: "privacy",
   title: "Privacy policy",
-  description: "How ochk.app and its API at me.ochk.io handle your data: no KYC, no PII required, a per-integrator scoped identity, and a documented, falsifiable account of every record OrangeCheck stores.",
+  description: "How ochk.app and its API at me.ochk.io handle your data: no KYC, no PII required, and a documented, falsifiable account of every record OrangeCheck stores.",
   metaTitle: "Privacy Policy \u2014 ochk.app",
-  metaDescription: "ochk.app privacy policy. No KYC, no PII required, per-integrator scoped identity, and a full account of what OrangeCheck stores.",
+  metaDescription: "ochk.app privacy policy. No KYC, no PII required, and a full account of what OrangeCheck stores.",
   effective: "2026-05-15",
-  updated: "2026-10-24",
+  updated: "2026-10-25",
   preamble: [
     {
       kind: "callout",
@@ -1052,7 +1052,7 @@ var privacy2 = {
     {
       id: "at-a-glance",
       heading: "at a glance",
-      hint: "no kyc \xB7 no pii \xB7 scoped identity",
+      hint: "no kyc \xB7 no pii \xB7 what sites get",
       blocks: [
         {
           kind: "bullets",
@@ -1066,8 +1066,8 @@ var privacy2 = {
               v: "a Bitcoin signature needs no personal data; an email code, Google or GitHub sign-in stores your email address, encrypted"
             },
             {
-              k: "scoped identity",
-              v: "integrating sites receive a per-site identifier, not your master identity; they cannot correlate you across sites"
+              k: "what sites get",
+              v: "each site gets its own subject id for events, but signing in gives every site the same orangecheck id (did:oc), so sites that compare ids can tell it is you"
             },
             {
               k: "no advertising",
@@ -1109,6 +1109,10 @@ var privacy2 = {
               k: "custody-state envelopes",
               v: "a record of each federation \u21C4 self-custody transition (graduation), surfaced on your own identity timeline."
             },
+            {
+              k: "site sign-ins",
+              v: "which live sites you signed in to or shared data with through orangecheck, and when. A site can name you as the person who earned for an event only once this record exists. No site sees it, and it is erased with your account or with that site's project."
+            },
             {
               k: "public anchors",
               v: "an OpenTimestamps proof over each envelope\u2019s hash, and a salted commitment to each envelope on Nostr. Public by design, and neither names you, the site or the amount. The envelope itself is served only to whoever holds its id. Drop manifests, which name no one, are published in full."
@@ -1119,15 +1123,15 @@ var privacy2 = {
     },
     {
       id: "scoped-identity",
-      heading: "per-integrator identity & scopes",
+      heading: "what sites get, and scopes",
       blocks: [
         {
           kind: "para",
-          text: "Each integrating site receives a deterministic **scoped subject** derived from your master identity and that site\u2019s project key. Scoped subjects are stable per-site (the integrator recognizes a returning user) but unlinkable across sites (two integrators cannot collude to correlate you). An integrator only ever receives your master Bitcoin address, email, or attestation tier if you **explicitly grant that scope** for that site \u2014 each scope is opt-in, per-site, and revocable at any time from your account."
+          text: "Each site gets its own subject id for events: a **scoped subject**, derived from your account and that site\u2019s project key, so the site recognizes you when you return. But signing in gives every site the same orangecheck id (did:oc), so sites that compare ids can tell it is you. An integrator only ever receives your master Bitcoin address, email, or attestation tier if you **explicitly grant that scope** for that site \u2014 each scope is opt-in, per-site, and revocable at any time from your account."
         },
         {
           kind: "para",
-          text: "Integrators never receive your event history with other sites, your wallet balance, your connected-sites list, or any cross-integrator data, regardless of scopes granted."
+          text: "Integrators never receive your event history with other sites, your wallet balance, your site sign-ins, or any cross-integrator data, regardless of scopes granted."
         }
       ]
     },
@@ -1238,7 +1242,7 @@ var privacy2 = {
     privacyChildren,
     privacyChanges
   ],
-  summary: "summary: no kyc, no pii required, a per-integrator scoped identity, and a documented account of every record orangecheck stores."
+  summary: "summary: no kyc, no pii required, and a documented account of every record orangecheck stores."
 };
 var meProfile = { terms: terms2, privacy: privacy2 };