From b9b0c53e03ff42ece1327bbb8601b5cae3fdd8db Mon Sep 17 00:00:00 2001
From: SkateSpots <skatespots>
Date: Mon, 28 Sep 2026 18:23:43 +0700
Subject: [PATCH] docs(privacy): tell users about the IP surfaces (mints,
 directions, AI) + surface it where it matters
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- /privacy IP section now lists Cashu mints, directions (OSRM/Transitous receive
  the route endpoints), and Sasquatch AI — and states the sharp bit: a relay can
  link your IP to your pubkey ('this person, from this address').
- Corrects the old 'none of these receive your GPS location' claim, which stopped
  being true once directions shipped (they get your origin/destination).
- Notes the one we DO shield: the mints directory is proxied through our server,
  so MintRadar never sees the user's IP.
- Removes the named VPN brand; copy is now neutral ('use one you pay for and
  trust; treat free as a warning sign').
- Settings -> Relays gets a one-line privacy note linking to /privacy.
---
 src/pages/PrivacyPage.tsx  | 19 +++++++++++++------
 src/pages/SettingsPage.tsx | 13 +++++++++++++
 2 files changed, 26 insertions(+), 6 deletions(-)

diff --git a/src/pages/PrivacyPage.tsx b/src/pages/PrivacyPage.tsx
index 564ddbe..873d36d 100644
--- a/src/pages/PrivacyPage.tsx
+++ b/src/pages/PrivacyPage.tsx
@@ -142,13 +142,20 @@ export default function PrivacyPage() {
               This is normal for any web or map app and isn't unique to us. Those servers are:
             </p>
             <ul className="list-disc pl-5 space-y-1 text-gray-400">
-              <li><strong className="text-white">Map tiles</strong> (OpenStreetMap) — sees your IP and which area of the map you look at.</li>
-              <li><strong className="text-white">Nostr relays</strong> — see your IP when the app reads/publishes.</li>
+              <li><strong className="text-white">Map tiles</strong> (OpenStreetMap) — see your IP and which area of the map you look at.</li>
+              <li><strong className="text-white">Nostr relays</strong> — see your IP when the app reads or publishes.</li>
+              <li><strong className="text-white">Cashu mints</strong> — see your IP whenever your wallet sends, receives or melts.</li>
+              <li><strong className="text-white">Directions</strong> (OSRM, and Transitous for transit) — receive the start and end of any route you ask for, not only your IP.</li>
               <li><strong className="text-white">Weather</strong> (Open-Meteo, opt-in) and <strong className="text-white">image uploads</strong> (Blossom), when you use them.</li>
+              <li><strong className="text-white">Sasquatch AI</strong> — your message goes to our own server, then to the model provider.</li>
             </ul>
             <p>
-              None of these receive your GPS location — but they do see your IP. If you'd rather hide
-              that too, read the next part.
+              Because you send your public key (npub) on the same connection, a relay can link your IP
+              to <em>you</em> — not just "someone connected", but "this person, from this address".
+            </p>
+            <p>
+              One thing we do shield: the <strong className="text-white">mints directory</strong> is
+              fetched through our server, so MintRadar never sees your IP.
             </p>
           </Section>
 
@@ -162,8 +169,8 @@ export default function PrivacyPage() {
               <div className="p-3.5 rounded-xl bg-white/4 border border-white/8">
                 <p className="font-bold text-white text-sm mb-1">🛡️ A reputable VPN</p>
                 <p className="text-xs text-gray-500">
-                  Hides your IP behind the VPN's servers. Easy, fast, works everywhere. Pick a
-                  no-logs provider you trust (e.g. Mullvad). Avoid sketchy "free" VPNs.
+                  Hides your IP behind the VPN's servers. Easy and fast. Use one you pay for and trust;
+                  free VPNs usually monetise your traffic, so treat "free" as a warning sign.
                 </p>
               </div>
               <div className="p-3.5 rounded-xl bg-white/4 border border-white/8">
diff --git a/src/pages/SettingsPage.tsx b/src/pages/SettingsPage.tsx
index ddd1baf..b3daa65 100644
--- a/src/pages/SettingsPage.tsx
+++ b/src/pages/SettingsPage.tsx
@@ -528,6 +528,19 @@ function RelaysScreen({ onBack }: { onBack: () => void }) {
     <div>
       <BackHeader title="Relays" onBack={onBack} />
       <div className="space-y-4">
+        {/* Privacy note — next to the relay list, where the thought actually occurs.
+            Deliberately neutral: no VPN brand, just "free is a warning sign". */}
+        <div className="flex items-start gap-3 rounded-2xl border border-white/8 bg-white/3 p-4">
+          <Shield className="h-4 w-4 shrink-0 mt-0.5 text-[#ccff00]" />
+          <p className="text-xs leading-relaxed text-muted-foreground">
+            Relays can see your <strong className="text-white">IP address</strong> when you connect.
+            Tor hides it — and treat a "free" VPN as a warning sign; they usually monetise your
+            traffic.{' '}
+            <Link to="/privacy" className="text-[#ccff00]/80 underline hover:text-[#ccff00]">
+              Read more
+            </Link>
+          </p>
+        </div>
         {user && (
           <div className="flex items-center justify-between p-4 rounded-2xl bg-white/3 border border-white/8">
             <div className="flex-1 min-w-0">