<?php

declare(strict_types=1);

namespace FlexatechTableReservations\Setup;

defined( 'ABSPATH' ) || exit;

/**
 * Suggested text for the site's privacy policy, shown in WordPress's own
 * privacy policy guide (Settings > Privacy). The owner copies what applies;
 * nothing is added to their page by itself.
 */
final class PrivacyPolicy {

	public static function register(): void {
		add_action( 'admin_init', [ self::class, 'add' ] );
	}

	public static function add(): void {
		if ( function_exists( 'wp_add_privacy_policy_content' ) ) {
			wp_add_privacy_policy_content( __( 'Flexatech Table Reservations', 'flexatech-table-reservations' ), wp_kses_post( self::text() ) );
		}
	}

	public static function text(): string {
		$section = static fn( string $title, string $body ): string => '<h2>' . esc_html( $title ) . '</h2><p>' . esc_html( $body ) . '</p>';

		return '<p class="privacy-policy-tutorial">' . esc_html__( 'Flexatech Table Reservations stores the reservations made on this site. Copy the parts that apply to you, and remove the ones about services you do not use.', 'flexatech-table-reservations' ) . '</p>'
			. $section(
				__( 'Table reservations', 'flexatech-table-reservations' ),
				__( 'When you book a table we store your name, phone number, email address, the number of guests, the date and time, and any notes you add, such as an allergy. We use them to hold your table, to send you the confirmation and a reminder, and to reach you about your booking. Our staff can see them in the reservation book. We keep them until we delete them.', 'flexatech-table-reservations' )
			)
			. $section(
				__( 'Emails', 'flexatech-table-reservations' ),
				__( 'The confirmation, reminder and change emails contain your booking details and a private link where you can see, move or cancel your table. Anyone with that link can do the same, so do not share it.', 'flexatech-table-reservations' )
			)
			. $section(
				__( 'Spam protection', 'flexatech-table-reservations' ),
				__( 'To stop automated bookings we count the bookings sent from your IP address for one hour. The address itself is not stored with your reservation. If the form shows a Cloudflare Turnstile check, Cloudflare receives your IP address and details about your browser to decide whether you are a person.', 'flexatech-table-reservations' )
			)
			. $section(
				__( 'Google Calendar', 'flexatech-table-reservations' ),
				__( 'If we copy reservations to our Google Calendar, Google receives your name, the number of guests, the date and time, your phone number, email address and notes, and stores them in our calendar.', 'flexatech-table-reservations' )
			)
			. $section(
				__( 'Other services we connect', 'flexatech-table-reservations' ),
				__( 'If we send new reservations to another service (a webhook), that service receives the same booking details. [Name the service here, or remove this part.]', 'flexatech-table-reservations' )
			);
	}
}