0.5.0: mobile apps and games positioning (README, site, og image, skills, CLI, MCP, adapters), MCP tools for subscriptions and catalog diff, tests, changelog

This commit is contained in:
CRTkafa 2026-10-11 01:47:09 +08:00
parent 205f65828f
commit c48eead0e0
51 changed files with 960 additions and 318 deletions

View file

@ -1,6 +1,6 @@
---
name: privacy-policy
description: Write and host one studio-wide privacy policy page for all of a developer's mobile games - a per-game services table (analytics, ads, server, purchases), children, retention and contact sections, linked from both store listings and inside each game. Use when the user needs a privacy policy, privacy URL for Google Play / App Store, or must update the policy after adding an SDK.
description: Write and host one studio-wide privacy policy page for all of a developer's mobile apps and games - a per-app services table (analytics, ads, server, purchases), children, retention and contact sections, linked from both store listings and inside each app. Use when the user needs a privacy policy, privacy URL for Google Play / App Store, or must update the policy after adding an SDK.
---
# Studio-wide privacy policy
@ -9,23 +9,24 @@ Template: `store/privacy-policy.html` (from `storebound init`, or `templates/pri
A single static page, light/dark, mobile friendly, English + a second language section.
## Steps
1. **One page for the studio, one row per game and service.** Columns: game, service (analytics, ad mediation +
networks, your server, app stores), what data and why, the player's choice (in-game switch, ATT prompt, OS ad
settings, "remove ads"). Remove what you do not use; never list services you do not ship.
1. **One page for the developer, one row per app and service.** Columns: app, service (analytics, ad mediation +
networks, your server or backend, sign-in provider, app stores), what data and why, the user's choice (in-app switch,
ATT prompt, OS ad settings, "remove ads", deleting the account). Remove what you do not use; never list services you do not ship.
2. Sections to keep: what we use (table), children (general audience, not directed at under 13 unless you really are
a kids app), retention and rights (how to request a copy / deletion, response time), security (HTTPS), changes
a kids app), retention and rights (how to request a copy / deletion, response time; with accounts: how to delete the account,
in the app and on the web, see the `account-deletion` skill), security (HTTPS), changes
(date at the top), contact email.
3. **Host** it at a stable URL on your developer website, the same domain that serves `app-ads.txt` and is named as
website in both listings (e.g. `https://example.com/privacy`). Any static host works.
4. **Link it everywhere**: `app.privacyPolicyUrl` in `storebound.config.ts` (pushed by `storebound apple listing`), Play
Console > App content > Privacy policy, and **inside the game** (Settings > Privacy opens the URL): App Store
Console > App content > Privacy policy, and **inside the app** (Settings > Privacy opens the URL): App Store
guideline 5.1.1 requires the in-app link.
5. **Verify**: the URL answers 200 over HTTPS without login or cookie wall, the table matches the Data safety /
App Privacy answers (`store-declarations` skill), the date is current.
## Gotchas
- Update the policy first, then the store forms, whenever a game adds an SDK or starts storing something new.
- Update the policy first, then the store forms, whenever an app adds an SDK or starts storing something new.
- The policy must not be a PDF or a Google Doc behind a login; a plain page is safest for review.
- Do not put a personal address or private email in it; use a studio contact address.
- If a game uses ads in the EU / EEA / UK / CH, say how consent works (CMP or non-personalized ads).
- If an app uses ads in the EU / EEA / UK / CH, say how consent works (CMP or non-personalized ads).
- This template is a starting point, not legal advice.