<?php
/**
 * Privacy: suggested text for the site's privacy policy (Settings > Privacy > Policy Guide) and
 * registration with the WP Consent API (the AI-referral script waits for "statistics" consent there).
 *
 * @package FlareOps
 */

namespace FlareOps;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

final class Privacy {

	public static function register_consent_api(): void {
		add_filter( 'wp_consent_api_registered_' . plugin_basename( FLAREOPS_FILE ), '__return_true' );
	}

	public static function policy_content(): void {
		if ( ! function_exists( 'wp_add_privacy_policy_content' ) ) {
			return;
		}
		wp_add_privacy_policy_content( 'flareOps', wp_kses_post( wpautop( self::text(), false ) ) );
	}

	/** Suggested privacy-policy text (docs/legal/merchant-privacy-text.md). The merchant adapts it. */
	public static function text(): string {
		$p = array(
			'<strong>' . __( 'AI visibility measurement (flareOps)', 'flareops' ) . '</strong>',
			__( 'We use flareOps, a service by flareOps (operated by its founder, Israel), to measure and improve how our products appear in AI assistants and search engines. flareOps processes the data below on our behalf, as our processor, under a data processing agreement.', 'flareops' ),
			'<strong>' . __( 'Bot request logs.', 'flareops' ) . '</strong> ' . __( 'When a request to our site looks like it comes from an AI bot or a search engine bot, we record the bot name, the page requested, the time, the response code and the IP address. The IP address is used to check whether the bot is genuine, by comparing it with the bot operator\'s published list of addresses; for this check, recent records are sent to flareOps. If a person\'s browser is mistaken for a bot, or someone pretends to be a bot, their IP address may be recorded. The full IP address is kept for no more than 7 days and then shortened so that it no longer identifies a single device. Individual records are deleted after 30 days; only daily totals are kept.', 'flareops' ),
			'<strong>' . __( 'Counting visits from AI apps.', 'flareops' ) . '</strong> ' . __( 'When you arrive on our site from an AI app (for example ChatGPT), a small script counts the visit. It uses no cookies, stores nothing on your device, and does not identify you: we only see totals. Where we use a consent banner, the script runs only if you agree to statistics.', 'flareops' ),
			'<strong>' . __( 'Orders from AI apps.', 'flareops' ) . '</strong> ' . __( 'If you place an order after arriving from an AI app, we record a coded reference to the order (a one-way code that flareOps cannot turn back into the order number), the date, the order total, the currency and the AI app it came from. No name, email, address or payment details are shared with flareOps.', 'flareops' ),
			'<strong>' . __( 'Who receives the data.', 'flareops' ) . '</strong> ' . __( 'flareOps and its service providers, listed at https://flareops.ai/subprocessors. Some of them are in the United States; transfers are protected by the safeguards described there.', 'flareops' ),
			'<strong>' . __( 'Legal basis.', 'flareops' ) . '</strong> ' . __( 'Our legitimate interest in understanding how AI assistants and search engines find our products, and in protecting our site from fake bots, or your consent where the law requires it.', 'flareops' ),
			'<strong>' . __( 'Your rights.', 'flareops' ) . '</strong> ' . __( 'You can ask us for access to, correction or deletion of data about you, or object to this processing, using the contact details in this policy.', 'flareops' ),
		);
		return implode( "\n\n", $p );
	}
}