// PRIVACY — V1
// Codex 04. Same chrome vocabulary as Terms V1.
//
// Policy anchors (preserved verbatim from operator direction):
//   - Generative AI responses are not stored by Unity AI Lab.
//   - Subject to the terms of Pollinations, which themselves do not store data
//     either; however, it is up to Pollinations for how the data is handled.
//   - Plus the standard legal scaffolding around what we do and don't collect.

const PrivacyV1 = () => {
  const effective = '2026-05-08';
  const version = 'v1.0';

  return (
    <div className="lV1" data-screen-label="Privacy — V1">
      {/* ─────────────────────── classified mast */}
      <div className="lV1-mast">
        <span className="lV1-mast-classification">FILE / OPEN — UNCLASSIFIED</span>
        <span>UNITY · AI · LAB / CODEX 04 · PRIVACY</span>
        <span>FOLIO 01 / 01</span>
      </div>

      {/* meta strip */}
      <dl className="lV1-meta">
        <div><dt>Effective</dt><dd>{effective}</dd></div>
        <div><dt>Version</dt><dd>{version}</dd></div>
        <div><dt>Operator</dt><dd>Unity AI Lab</dd></div>
        <div>
          <dt>Contact</dt>
          <dd><a href="mailto:contact@unityailab.com">contact@unityailab.com</a></dd>
        </div>
      </dl>

      {/* ─────────────────────── cover */}
      <section className="lV1-cover">
        <div className="lV1-cover-fileno">FILE-04 · PRIVACY POLICY · v2026.05</div>
        <h1>Privacy Policy</h1>
        <div className="lV1-cover-rule" />
        <p className="lV1-cover-lede">
          What we collect, what we don&apos;t, and what happens to the prompts
          and outputs you exchange with the AI. The short version is: we store
          almost nothing on our side, but anything you send leaves your browser.
          The long version follows.
        </p>
      </section>

      {/* ─────────────────────── TOC */}
      <nav className="lV1-toc" aria-label="Table of contents">
        <div className="lV1-toc-kicker">Contents</div>
        <ol>
          <li><span className="lV1-toc-num">I</span> <a href="#pp-scope">Scope &amp; Acceptance</a></li>
          <li><span className="lV1-toc-num">II</span> <a href="#pp-summary">At a Glance</a></li>
          <li><span className="lV1-toc-num">III</span> <a href="#pp-who">Who We Are</a></li>
          <li><span className="lV1-toc-num">IV</span> <a href="#pp-not">What We Do Not Collect</a></li>
          <li><span className="lV1-toc-num">V</span> <a href="#pp-localstorage">Local Browser Storage</a></li>
          <li><span className="lV1-toc-num">VI</span> <a href="#pp-counter">Visitor Counter</a></li>
          <li><span className="lV1-toc-num">VII</span> <a href="#pp-ai">AI Generations &amp; Pollinations</a></li>
          <li><span className="lV1-toc-num">VIII</span> <a href="#pp-cookies">Cookies &amp; Similar Technologies</a></li>
          <li><span className="lV1-toc-num">IX</span> <a href="#pp-hosting">Hosting &amp; Server Access Logs</a></li>
          <li><span className="lV1-toc-num">X</span> <a href="#pp-children">Children&apos;s Privacy</a></li>
          <li><span className="lV1-toc-num">XI</span> <a href="#pp-under18">Notice to Anyone Under 18</a></li>
          <li><span className="lV1-toc-num">XII</span> <a href="#pp-rights">Your Rights Under GDPR &amp; CCPA</a></li>
          <li><span className="lV1-toc-num">XIII</span> <a href="#pp-security">Security</a></li>
          <li><span className="lV1-toc-num">XIV</span> <a href="#pp-international">International Data Transfers</a></li>
          <li><span className="lV1-toc-num">XV</span> <a href="#pp-retention">Retention</a></li>
          <li><span className="lV1-toc-num">XVI</span> <a href="#pp-changes">Changes to this Policy</a></li>
          <li><span className="lV1-toc-num">XVII</span> <a href="#pp-contact">Contact</a></li>
        </ol>
      </nav>

      {/* ─────────────────────── I · SCOPE */}
      <section className="lV1-section" id="pp-scope">
        <div className="lV1-band">
          <span><span className="lV1-band-num">I</span> · SCOPE</span>
          <span className="lV1-band-name">ACCEPTANCE</span>
          <span>FOLIO 01</span>
        </div>
        <h2>Scope &amp; Acceptance</h2>
        <p>
          This Privacy Policy (the &quot;Policy&quot;) describes how Unity AI
          Lab (&quot;Unity AI Lab,&quot; &quot;we,&quot; &quot;us,&quot; or
          &quot;our&quot;) collects, uses, discloses, and otherwise handles
          information in connection with the website at{' '}
          <a href="https://www.unityailab.com">https://www.unityailab.com</a>{' '}
          and the related demos, applications, libraries, and downloads
          (collectively, the &quot;Service&quot;). It is part of and is
          incorporated into our <a href="./terms">Terms of Service</a>; capitalized
          terms not defined here have the meanings given to them in the Terms
          of Service.
        </p>
        <p>
          By using the Service, you confirm that you have read this Policy and
          consent to the practices it describes. If you do not consent, you
          must close the page and stop using the Service.
        </p>
      </section>

      {/* ─────────────────────── II · AT A GLANCE */}
      <section className="lV1-section" id="pp-summary">
        <div className="lV1-band">
          <span><span className="lV1-band-num">II</span> · GLANCE</span>
          <span className="lV1-band-name">QUICK READ</span>
          <span>FOLIO 02</span>
        </div>
        <h2>At a Glance</h2>
        <p>The honest one-screen version, so you do not have to read the whole document to get the gist:</p>
        <ul>
          <li><strong>We do not maintain a server-side database of users.</strong> There is no account system, no profile, and no copy of your conversations on our servers.</li>
          <li><strong>We do not store the prompts you send or the AI responses you receive.</strong> Generative AI responses are not stored by us. The exchange happens between your browser and the generative AI provider; we just relay it.</li>
          <li><strong>The AI work is performed by Pollinations,</strong> a third-party generative AI provider. Your prompts leave your browser and travel to Pollinations and Pollinations&apos; upstream providers. <strong>It is up to Pollinations for how the data is handled,</strong> in accordance with their terms — and they themselves do not store data either, but you should review their policies directly.</li>
          <li><strong>Your chat history, settings, and age-verification flags are kept in your own browser&apos;s localStorage.</strong> They never leave your device unless you explicitly export them. If you clear your browser data, they are gone.</li>
          <li><strong>We do not use cookies, advertising trackers, analytics pixels, fingerprinting, or third-party retargeting.</strong></li>
          <li><strong>We use a third-party stateless visitor counter</strong> (abacus.jasoncameron.dev) to display an aggregate visit number on the home page. It returns a number; it does not return personal data.</li>
          <li><strong>The Service is hosted on GitHub Pages,</strong> which keeps standard server access logs of its own as part of operating the platform.</li>
          <li><strong>The Service is for adults.</strong> Minors should not use it; see the under-18 notice below.</li>
        </ul>
      </section>

      {/* ─────────────────────── III · WHO WE ARE */}
      <section className="lV1-section" id="pp-who">
        <div className="lV1-band">
          <span><span className="lV1-band-num">III</span> · WHO</span>
          <span className="lV1-band-name">WE ARE</span>
          <span>FOLIO 03</span>
        </div>
        <h2>Who We Are</h2>
        <p>
          Unity AI Lab is an unincorporated hobby project operated by a small
          group of engineers across multiple U.S. states. The Service is not a
          commercial product, is provided free of charge, and exists primarily
          as a public proof-of-concept showcase of generative-AI security and
          jailbreak research from a red-team perspective. The Service is not a
          generative AI provider; the underlying model inference is performed
          by Pollinations and its upstream providers.
        </p>
        <p>
          For the purposes of data-protection laws that recognize the concept,
          Unity AI Lab is the &quot;controller&quot; with respect to the limited
          information described in Sections V, VI, and IX of this Policy.
          Pollinations is a separate controller (or processor, depending on the
          legal framing) with respect to the prompts and AI generations
          described in Section VII.
        </p>
      </section>

      {/* ─────────────────────── IV · WHAT WE DO NOT COLLECT */}
      <section className="lV1-section" id="pp-not">
        <div className="lV1-band">
          <span><span className="lV1-band-num">IV</span> · NOT</span>
          <span className="lV1-band-name">WHAT WE DON&apos;T TAKE</span>
          <span>FOLIO 04</span>
        </div>
        <h2>What We Do Not Collect</h2>
        <p>It is shorter to start with what we do not collect, because the list of things we do collect is small:</p>
        <ul>
          <li>We do not require, ask for, or store your name, email address, phone number, postal address, government identifier, payment-card information, or any other directly identifying personal data, except where you voluntarily send us an email at the address provided in this Policy.</li>
          <li>We do not run a user-account system. There is no sign-up, no profile, and no user database on our side.</li>
          <li>We do not store the content of your chat conversations on our servers. Your prompts and the AI responses are never written to a Unity AI Lab database.</li>
          <li>We do not store generated images, audio, or video on our servers. Generations are produced by Pollinations on demand and streamed or linked directly to your browser.</li>
          <li>We do not use cookies set by Unity AI Lab. We do not use cookies for analytics, advertising, or tracking. (Third-party services we link to or embed may use their own cookies on their own domains; see Section VIII.)</li>
          <li>We do not use Google Analytics, Meta Pixel, TikTok Pixel, or any other advertising or behavioral analytics trackers.</li>
          <li>We do not fingerprint your browser or device.</li>
          <li>We do not sell, rent, license, or share personal data with data brokers, advertisers, or any third party for marketing purposes — and we have nothing to sell, rent, or share even if we wanted to.</li>
        </ul>
      </section>

      {/* ─────────────────────── V · LOCALSTORAGE */}
      <section className="lV1-section" id="pp-localstorage">
        <div className="lV1-band">
          <span><span className="lV1-band-num">V</span> · LOCAL</span>
          <span className="lV1-band-name">BROWSER STORAGE</span>
          <span>FOLIO 05</span>
        </div>
        <h2>Local Browser Storage</h2>
        <p>
          The Service uses your own browser&apos;s localStorage and
          sessionStorage to remember things between page loads on your device.
          These values stay on your device and are not transmitted to Unity AI
          Lab&apos;s servers. The Service may store, among other items:
        </p>
        <ul>
          <li><strong>Chat history</strong> — messages you have exchanged with the AI demo or app demos, so that refreshing the page does not wipe your conversation.</li>
          <li><strong>Settings</strong> — model preferences, voice settings, theme choices, and similar non-identifying configuration.</li>
          <li><strong>Age-verification flags</strong> — a small set of localStorage entries used to remember that you have passed the age gate so you do not have to repeat it on every page (these flags include keys such as <code>button18</code>, <code>birthdate</code>, and a randomized site flag). Passing the gate is a self-attestation; it does not record an identity.</li>
          <li><strong>Visitor-counter state</strong> — a session-scoped flag that prevents counting the same browser session more than once.</li>
        </ul>
        <p>
          You can clear localStorage at any time through your browser&apos;s
          settings. Doing so will erase your chat history, your saved settings,
          and the age-verification flags on this device. The Service does not
          maintain a server-side copy from which the data could be recovered.
        </p>
      </section>

      {/* ─────────────────────── VI · VISITOR COUNTER */}
      <section className="lV1-section" id="pp-counter">
        <div className="lV1-band">
          <span><span className="lV1-band-num">VI</span> · COUNTER</span>
          <span className="lV1-band-name">AGGREGATE VISITS</span>
          <span>FOLIO 06</span>
        </div>
        <h2>Visitor Counter</h2>
        <p>
          The Service displays an aggregate visitor counter on certain pages.
          This counter is provided by a third-party stateless service operated
          by an independent developer at{' '}
          <a href="https://abacus.jasoncameron.dev" target="_blank" rel="noopener noreferrer">abacus.jasoncameron.dev</a>.
          When your browser loads a page that displays the counter, it makes
          an HTTP request to that service for the current count (and, once per
          browser session, increments it by one).
        </p>
        <p>
          The counter is stateless and aggregate. It returns a number; it does
          not return personal data and does not link visits across sessions.
          Like any HTTP request, the request to the counter service necessarily
          includes your IP address and browser User-Agent string at the network
          level — Unity AI Lab does not see, log, or store these values, but
          the third-party counter service may do so as part of operating its
          service. Unity AI Lab does not control, audit, or determine the
          retention practices of the third-party counter service. If you would
          prefer that no such request leave your browser, you can block
          requests to <code>abacus.jasoncameron.dev</code> with browser
          extensions or DNS-level filters.
        </p>
      </section>

      {/* ─────────────────────── VII · AI / POLLINATIONS */}
      <section className="lV1-section" id="pp-ai">
        <div className="lV1-band">
          <span><span className="lV1-band-num">VII</span> · AI</span>
          <span className="lV1-band-name">POLLINATIONS DATA FLOW</span>
          <span>FOLIO 07</span>
        </div>
        <h2>AI Generations &amp; Pollinations</h2>
        <p>
          <strong>Any generative AI responses are not stored by us.</strong> When
          you interact with a chat, image, voice, or vision feature on the
          Service, the request is forwarded — through a Cloudflare Worker proxy
          we operate — to Pollinations (<a href="https://pollinations.ai" target="_blank" rel="noopener noreferrer">pollinations.ai</a>),
          which performs the inference on its own systems and returns the
          response. We relay the response to your browser.
        </p>
        <p>
          The Cloudflare Worker proxy exists for two reasons: first, to keep
          the upstream API token off the client (so it cannot be extracted by
          any user of the Service); and second, to attach the moderation-routing
          parameters required by Pollinations and its upstream providers. The
          Worker does not write the prompts or responses to durable storage;
          it forwards them and discards. Cloudflare, as the operator of the
          Worker runtime, applies its own platform-level logging and security
          measures, governed by Cloudflare&apos;s privacy practices.
        </p>
        <p>
          The data exchange with the AI is therefore <strong>subject to the terms of Pollinations,</strong> which themselves do not store data either; however,{' '}
          <strong>it is up to Pollinations for how the data is handled.</strong>{' '}
          Pollinations relies on its own model providers, hosting providers,
          and content-moderation providers (which may include providers
          operating on the Microsoft Azure OpenAI Service, among others). Each
          of those upstream providers has its own privacy policy and data-handling
          practices that may apply to the prompts and outputs that pass through
          their systems. Unity AI Lab is not in privity with those upstream
          providers and does not control, audit, or determine their data
          retention.
        </p>
        <p>
          Practical consequences:
        </p>
        <ul>
          <li>You should not enter into the Service any information you would not be comfortable sending to a third-party AI provider whose retention and training practices you have not personally reviewed.</li>
          <li>You should not enter the personal data of identifiable third parties into the Service.</li>
          <li>You should not enter any information that is subject to confidentiality, attorney-client privilege, HIPAA, FERPA, GLBA, PCI-DSS, or similar regulated-data protections.</li>
          <li>You should review Pollinations&apos; published privacy practices directly at <a href="https://pollinations.ai" target="_blank" rel="noopener noreferrer">pollinations.ai</a> and the practices of the underlying model providers if and when they are disclosed.</li>
        </ul>
      </section>

      {/* ─────────────────────── VIII · COOKIES */}
      <section className="lV1-section" id="pp-cookies">
        <div className="lV1-band">
          <span><span className="lV1-band-num">VIII</span> · COOKIES</span>
          <span className="lV1-band-name">SIMILAR TECHNOLOGIES</span>
          <span>FOLIO 08</span>
        </div>
        <h2>Cookies &amp; Similar Technologies</h2>
        <p>
          Unity AI Lab does not set cookies for analytics, advertising, or
          behavioral tracking. The Service uses localStorage and sessionStorage
          (described in Section V) for functional state on your device only.
          We do not consider these cookies for the purposes of laws that
          require a cookie banner, but their use is disclosed in this Policy
          for full transparency.
        </p>
        <p>
          Third-party services that the Service depends on or links to —
          including font and library CDNs (Google Fonts, unpkg.com), the
          visitor-counter service, GitHub Pages, and any external link you
          choose to follow — may set their own cookies on their own domains
          when your browser contacts them. Those cookies are governed by the
          privacy policies of those third parties and are outside Unity AI
          Lab&apos;s control.
        </p>
      </section>

      {/* ─────────────────────── IX · HOSTING */}
      <section className="lV1-section" id="pp-hosting">
        <div className="lV1-band">
          <span><span className="lV1-band-num">IX</span> · HOSTING</span>
          <span className="lV1-band-name">ACCESS LOGS</span>
          <span>FOLIO 09</span>
        </div>
        <h2>Hosting &amp; Server Access Logs</h2>
        <p>
          The Service&apos;s static pages are served from{' '}
          <strong>GitHub Pages</strong>, which is operated by GitHub, Inc.
          (<a href="https://docs.github.com/site-policy" target="_blank" rel="noopener noreferrer">github.com/site-policy</a>).
          As a normal incident of operating any web hosting platform, GitHub
          may log standard server access information when your browser
          requests pages — including IP address, request URL, timestamp,
          User-Agent, and referrer. Unity AI Lab does not have direct
          read-access to those logs; they are governed by GitHub&apos;s privacy
          and security policies.
        </p>
        <p>
          The Cloudflare Worker proxy described in Section VII is operated on
          Cloudflare&apos;s infrastructure and is governed by Cloudflare&apos;s
          privacy and security practices. Cloudflare may log standard request
          metadata at the platform level.
        </p>
      </section>

      {/* ─────────────────────── X · CHILDREN'S PRIVACY */}
      <section className="lV1-section" id="pp-children">
        <div className="lV1-band">
          <span><span className="lV1-band-num">X</span> · CHILDREN</span>
          <span className="lV1-band-name">UNDER-AGE PROTECTION</span>
          <span>FOLIO 10</span>
        </div>
        <h2>Children&apos;s Privacy</h2>
        <p>
          The Service is not directed to and is not intended for use by
          children. The Service is restricted to individuals above the age of
          consent in their jurisdiction (the age at which a person is
          considered an adult under applicable law). For users in the United
          States this generally means individuals who are eighteen (18) years
          of age or older; in some jurisdictions the threshold is higher.
        </p>
        <p>
          We do not knowingly collect personal data from children. We do not
          run a user-account system, do not store user-submitted content
          server-side, and do not maintain a database of users — child or
          otherwise. If we become aware that a person under the applicable age
          of consent has nevertheless provided personal data through any
          channel under our control (such as the contact email), we will
          delete that data promptly.
        </p>
        <p>
          If you are a parent or legal guardian and you believe a minor in your
          care has used the Service, please contact us at{' '}
          <a href="mailto:contact@unityailab.com">contact@unityailab.com</a>{' '}
          and we will, where reasonable and feasible, take steps to assist —
          recognizing the architectural limits described in Section IV (we do
          not store conversations and do not maintain user records that could
          be deleted).
        </p>
        <p>
          Any responsibility for minors who reach the Service is, at all times,
          deferred back to the parent&apos;s or guardian&apos;s responsibility
          to keep their children off of the Service.
        </p>
      </section>

      {/* ─────────────────────── XI · UNDER-18 NOTICE */}
      <section className="lV1-section" id="pp-under18">
        <div className="lV1-band">
          <span><span className="lV1-band-num">XI</span> · NOTICE</span>
          <span className="lV1-band-name">TO ANYONE UNDER 18</span>
          <span>FOLIO 11</span>
        </div>
        <h2>If you are under 18 — read this in plain English</h2>

        <div className="lV1-under18">
          <div className="lV1-under18-kicker">PLAIN ENGLISH · NO LEGALESE</div>
          <h3>This site is not for you.</h3>
          <p>
            <strong>If you are under the age of 18 — or under the age of an adult in your country, state, or region — please stop using this website right now.</strong>{' '}
            We mean it. The site is built for adults, and the chat, images, and
            text on it can include explicit, graphic, violent, sexual, or
            otherwise mature content that we don&apos;t want you to see.
          </p>
          <p>
            On the privacy side specifically: even though we don&apos;t keep a
            list of who you are or what you typed, the things you type are sent
            to a third-party AI provider (Pollinations) and to the providers
            they use. We can&apos;t tell those companies to forget about you,
            because we don&apos;t even know who you are. So your best move is
            to not send anything from this site at all.
          </p>
          <p>What you should do, in order:</p>
          <ol>
            <li><strong>Close this tab or browser window.</strong> Don&apos;t click around. Just leave.</li>
            <li><strong>Tell a parent, guardian, or another trusted adult</strong> that you ended up on a site that is meant for grown-ups, especially if anything on this site upset, confused, or pressured you.</li>
            <li><strong>If anyone is hurting you or making you feel unsafe online,</strong> talk to a trusted adult or contact a local resource — for example, in the United States you can call or text the Crisis Text Line at 741741, in the UK you can call Childline at 0800 1111, or you can search for the equivalent helpline in your country.</li>
            <li><strong>Do not give your real name, address, school, phone number, or photos</strong> to any AI chat — on this site or anywhere else.</li>
          </ol>
          <p>
            If you stay on the site after reading this notice, you and your
            parents or legal guardians are responsible for that choice — not
            Unity AI Lab. We don&apos;t want you here, and we&apos;re asking
            you, directly and clearly, to leave.
          </p>
        </div>
      </section>

      {/* ─────────────────────── XII · GDPR / CCPA */}
      <section className="lV1-section" id="pp-rights">
        <div className="lV1-band">
          <span><span className="lV1-band-num">XII</span> · RIGHTS</span>
          <span className="lV1-band-name">GDPR &amp; CCPA</span>
          <span>FOLIO 12</span>
        </div>
        <h2>Your Rights Under GDPR &amp; CCPA</h2>
        <p>
          Depending on where you live, you may have rights under the European
          Union General Data Protection Regulation (GDPR), the United Kingdom
          GDPR, the California Consumer Privacy Act / California Privacy
          Rights Act (CCPA/CPRA), or other regional data-protection laws. The
          architecture of the Service substantially limits the practical
          application of those rights as against Unity AI Lab, because we do
          not maintain a server-side store of personal data — but we honor
          them to the extent they apply.
        </p>
        <h3>Your rights, generally</h3>
        <ul>
          <li><strong>Right to know / right of access</strong> — to ask whether we hold personal data about you and to receive a copy. In practice, the answer for the overwhelming majority of users is: we hold no such data.</li>
          <li><strong>Right to correction</strong> — to ask us to correct inaccurate personal data we hold about you, where we hold any.</li>
          <li><strong>Right to deletion / right to be forgotten</strong> — to ask us to delete personal data we hold about you. Most data referenced on the Service lives in your own browser (localStorage) and is yours to delete via your browser settings; we do not have it on a server.</li>
          <li><strong>Right to data portability</strong> — to receive a copy of your data in a portable format. Where the only data is in your browser&apos;s localStorage, you already have direct access to it.</li>
          <li><strong>Right to object / right to restrict processing</strong> — to ask us to stop or limit certain processing.</li>
          <li><strong>Right not to be discriminated against</strong> — for exercising your rights under CCPA/CPRA.</li>
          <li><strong>Right to lodge a complaint</strong> — with your local data-protection authority (DPA) under GDPR.</li>
        </ul>
        <h3>How to exercise your rights</h3>
        <p>
          To exercise any of these rights, contact{' '}
          <a href="mailto:contact@unityailab.com">contact@unityailab.com</a>{' '}
          with a clear description of the request. We will respond within the
          timeframe required by applicable law (generally one month under
          GDPR, forty-five days under CCPA/CPRA, with possible extensions
          where permitted). We may need to verify your identity before
          actioning a request that involves the disclosure or deletion of
          personal data; the practical limit on this is that we usually have
          no personal data to verify against.
        </p>
        <h3>Sales / sharing (CCPA/CPRA)</h3>
        <p>
          We do not sell or share personal data as those terms are defined
          under the CCPA/CPRA, and we do not have a &quot;Do Not Sell or Share My
          Personal Information&quot; link on the Service because we have nothing
          to sell or share.
        </p>
        <h3>Authorized agents</h3>
        <p>
          You may use an authorized agent to exercise your rights under
          applicable law. We may require proof of the agent&apos;s authority
          before acting on a request submitted by an agent.
        </p>
      </section>

      {/* ─────────────────────── XIII · SECURITY */}
      <section className="lV1-section" id="pp-security">
        <div className="lV1-band">
          <span><span className="lV1-band-num">XIII</span> · SECURITY</span>
          <span className="lV1-band-name">REASONABLE MEASURES</span>
          <span>FOLIO 13</span>
        </div>
        <h2>Security</h2>
        <p>
          Unity AI Lab uses commercially reasonable security practices for a
          static website hosted on GitHub Pages and an associated Cloudflare
          Worker proxy: HTTPS for all traffic, server-side storage of upstream
          API tokens (so they are never exposed to the browser), no
          client-side credentials, no user-account database to compromise, and
          no server-side store of conversations. Notwithstanding these
          practices, no method of transmission over the internet or method of
          electronic storage is one-hundred-percent secure, and we cannot
          guarantee absolute security.
        </p>
      </section>

      {/* ─────────────────────── XIV · INTERNATIONAL */}
      <section className="lV1-section" id="pp-international">
        <div className="lV1-band">
          <span><span className="lV1-band-num">XIV</span> · INT&apos;L</span>
          <span className="lV1-band-name">DATA TRANSFERS</span>
          <span>FOLIO 14</span>
        </div>
        <h2>International Data Transfers</h2>
        <p>
          The Service is hosted on infrastructure located primarily in the
          United States (GitHub Pages, Cloudflare). Pollinations and its
          upstream providers operate their own infrastructure in jurisdictions
          determined by them. By using the Service from outside the United
          States or outside the location of any upstream provider, you
          understand and agree that your prompts and any associated request
          metadata may be transferred to and processed in the United States
          and other jurisdictions whose data-protection laws may differ from
          those of your home jurisdiction. To the extent any such transfer is
          subject to data-protection law, we rely on the lawful-transfer
          mechanisms made available by the relevant providers (such as the
          European Commission&apos;s Standard Contractual Clauses, where
          applicable to those providers&apos; own arrangements with their
          customers). Unity AI Lab itself does not maintain a separate
          cross-border-transfer mechanism because we do not maintain a
          server-side store of user data.
        </p>
      </section>

      {/* ─────────────────────── XV · RETENTION */}
      <section className="lV1-section" id="pp-retention">
        <div className="lV1-band">
          <span><span className="lV1-band-num">XV</span> · RETENTION</span>
          <span className="lV1-band-name">HOW LONG WE KEEP THINGS</span>
          <span>FOLIO 15</span>
        </div>
        <h2>Retention</h2>
        <p>
          Because Unity AI Lab does not maintain a server-side store of user
          data, retention on our side is limited to:
        </p>
        <ul>
          <li><strong>Your localStorage entries</strong> — retained on your device until you clear them through your browser settings. We do not have a copy.</li>
          <li><strong>Email correspondence</strong> — emails you send to <a href="mailto:contact@unityailab.com">contact@unityailab.com</a> are retained in our email inbox for as long as is reasonably necessary to address the inquiry, and then either deleted or archived in line with normal email-management practices.</li>
        </ul>
        <p>
          Third-party providers — including GitHub Pages, Cloudflare,
          Pollinations, the upstream model providers, the visitor counter
          service, and the font / library CDNs — apply their own retention
          policies to any logs or metadata they collect, which are outside our
          control.
        </p>
      </section>

      {/* ─────────────────────── XVI · CHANGES */}
      <section className="lV1-section" id="pp-changes">
        <div className="lV1-band">
          <span><span className="lV1-band-num">XVI</span> · CHANGES</span>
          <span className="lV1-band-name">POLICY UPDATES</span>
          <span>FOLIO 16</span>
        </div>
        <h2>Changes to this Policy</h2>
        <p>
          We may revise this Policy from time to time. When we do, we will
          update the &quot;Effective&quot; date at the top of this page and,
          for material changes, we will mark the revision in the version
          history. Your continued use of the Service after the Effective date
          of a revision constitutes your acceptance of the revised Policy.
          If you do not agree to a revision, your sole remedy is to stop using
          the Service and, if you wish, to clear the localStorage entries
          described in Section V.
        </p>
      </section>

      {/* ─────────────────────── XVII · CONTACT */}
      <section className="lV1-section" id="pp-contact">
        <div className="lV1-band">
          <span><span className="lV1-band-num">XVII</span> · CONTACT</span>
          <span className="lV1-band-name">REACH US</span>
          <span>FOLIO 17</span>
        </div>
        <h2>Contact</h2>
        <p>
          For questions about this Policy, to exercise any data-protection
          right, or to raise a privacy-related concern, contact us at:
        </p>
        <p>
          <strong>Unity AI Lab</strong><br />
          Email:{' '}
          <a href="mailto:contact@unityailab.com">contact@unityailab.com</a><br />
          Web: <a href="https://www.unityailab.com">https://www.unityailab.com</a>
        </p>
        <p>
          Email is the authoritative contact mechanism for all privacy notices.
          Please use a clear subject line such as <em>&quot;Privacy request — access&quot;</em>{' '}
          or <em>&quot;Privacy request — deletion&quot;</em> to help us route
          your request quickly.
        </p>
      </section>

      {/* ─────────────────────── eof */}
      <div className="lV1-eof">
        <span><strong>END OF FILE</strong> · CODEX 04 · PRIVACY</span>
        <span>UNITY · AI · LAB</span>
        <span>v2026.05</span>
      </div>
    </div>
  );
};

window.PrivacyV1 = PrivacyV1;