fix(privacy): disclose connected-service data handling

[drewstone]

Outcome

Publishes connected-service data handling required for Reddit and other OAuth app reviews.

Changes

• Adds id.tangle.tools and product subdomains to the policy scope.
• Discloses encrypted provider credentials, user-authorized use, audit behavior, retention, sharing, disconnect effects, and third-party terms.
• States that connected-service data is not sold or used for advertising, sensitive-trait profiling, or AI model training.

Proof

• pnpm build
• pnpm check:links: 130 pages, 794 links, 0 broken
• bad snapshot: complete legal-page accessibility tree
• bad design-audit --extract-tokens: rendered at 375x812, 768x1024, and 1440x900 with no overflow found

Screenshots

Desktop

Mobile

[tangletools]

✅ Auto-approved drewstone PR — 90bcfbf6

This PR was opened by the trusted drewstone account.
The full PR reviewer audit still runs separately and will publish findings if it detects issues.

_{tangletools · auto-approval · reason: drewstone_author · 2026-08-11T02:22:32Z}