From 24f1eb6cc611f458c45f0ac4046efce51211d7d3 Mon Sep 17 00:00:00 2001
From: srdusr <99972264+srdusr@users.noreply.github.com>
Date: Sat, 6 Dec 2025 00:58:00 +0200
Subject: Fix content packs, seed the leaderboard, and add the missing site
 furniture

Naming
- "Typing Test" removed from the browser tab, the crate description and the
  READMEs. The scope outgrew it: solo practice, live races, code drills and
  adaptive weak-key training.

Content
- Movies was prose *about* film, not film quotes - the same mistake the
  programming pack had. Replaced with 28 attributed lines. New anime pack,
  28 lines across 24 series.
- This follows the model TypeRacer states outright ("type quotes from popular
  music, songs, anime, comic books and more"): short excerpts attributed to
  the work they came from. The scalable half of their approach is user
  submission with moderation, which is a feature this does not have yet.

Leaderboard
- An empty board tells a new player nobody is here. Bots now race the eight
  fixed-length leaderboard modes, seeded with a fortnight of backdated results
  on first run and one new result every 90 seconds after.
- They are ordinary users carrying is_bot, returned by the same query and
  labelled "bot" in the UI. Seeding a board is reasonable; passing synthetic
  scores off as human results is not, so the flag travels with the row.
- Seeding is checked per mode. A single result from the live ticker used to
  satisfy an "any bot results" guard and leave every other mode empty forever.

Stats
- The per-key accuracy data Practice mode is built on was computed, used to
  generate text, and never shown. The screen now ranks your weakest keys with
  the error rate and pause length behind each one.
- Added recent form against your lifetime average, best accuracy, and tests
  this week.

Multiplayer standings
- Now place, racer, WPM, accuracy and time, with column labels - the columns
  TypeRacer and 10FastFingers both show.

Site furniture
- Share (Web Share where available, clipboard otherwise - no third-party
  button, no tracking script), a GitHub link, and a real privacy page written
  from what the code actually stores rather than from a template.

Button hierarchy
- Everything was an outlined box of roughly equal weight, so a screen's one
  real action, a settings toggle and a filter chip looked alike. Three tiers
  now: primary (filled, one per screen), default (outlined), quiet (toggles
  and filters, bordered only when hovered or active).
---
 web/src/app.js | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

(limited to 'web/src/app.js')

diff --git a/web/src/app.js b/web/src/app.js
index cc4e0d2..55686be 100644
--- a/web/src/app.js
+++ b/web/src/app.js
@@ -135,6 +135,7 @@ export function startApp(root, localTexts) {
             onShowMultiplayer: showMultiplayer,
             onShowStore: showStore,
             onShowLyrics: showLyrics,
+            onShowPrivacy: showPrivacy,
             onSimulateTest: simulateTest,
         });
     }
@@ -171,6 +172,21 @@ export function startApp(root, localTexts) {
         cleanupScreen = renderStatsScreen(root, { onBack: showMainMenu, onShowPlaceholder: showPlaceholder, onShowAccount: showAccount, onShowLeaderboard: showLeaderboard, onShowFriends: showFriends, onShowMultiplayer: showMultiplayer, onShowStore: showStore });
     }
 
+    // Written from what the code actually does, not from a template: this app
+    // has no analytics, no third-party scripts and no npm runtime dependencies,
+    // so there is genuinely very little to disclose.
+    function showPrivacy() {
+        showPlaceholder('Privacy', [
+            'On this device, in your browser: your theme, typing settings, personal bests, lifetime stats and per-key accuracy. Clearing site data removes all of it. Nothing here is sent anywhere unless you sign in.',
+            '',
+            'On the server, only if you create an account: your username, a hash of your password (never the password), your completed results, your friendships, and anything you equip from the store. Sessions expire. If you connect Spotify, its access token is stored so Lyrics mode can read what is playing.',
+            '',
+            'Multiplayer sends the name you race under, your live progress and your final result to the other people in your room, for as long as the race lasts.',
+            '',
+            'There are no analytics, no advertising and no third-party scripts - the site loads no code it does not ship itself. Nothing is sold or shared.',
+        ].join('\n'));
+    }
+
     function showPlaceholder(title, description) {
         teardown();
         setScreen('placeholder');
@@ -315,6 +331,7 @@ export function startApp(root, localTexts) {
             onShowFriends: showFriends,
             onShowMultiplayer: showMultiplayer,
             onShowStore: showStore,
+            onShowPrivacy: showPrivacy,
         });
     }
 
-- 
cgit v1.2.3