legal: strengthen disclaimer, liability, and warranty language

- LICENSE: expanded warranty disclaimer covering silent failures from
  third-party changes, coverage gaps, regulatory non-compliance, and
  commercial licensee expectations. Explicit limitation of liability
  for privacy breaches, identity theft, and regulatory penalties.
- PRIVACY.md: added limitations section covering third-party changes,
  coverage gaps, user responsibility, and compliance disclaimer.
- README.md: detailed disclaimer with specific scenarios — site API
  changes, coverage gaps, user verification responsibility, and
  commercial license scope.
- Popup: expanded footer warning about third-party changes and user
  responsibility.
- Options page: added footer disclaimer with LICENSE link, updated
  version to 0.9.0.

https://claude.ai/code/session_01KF4i7Ra7zCEDskxDBaNtcT

LICENSE

@@ -29,10 +29,57 @@ refrain from using the Licensed Work.
 All copies of the original and modified Licensed Work, and
 derivative works of the Licensed Work, are subject to this License.
 
-THE LICENSED WORK IS PROVIDED "AS IS". THE LICENSOR HEREBY DISCLAIMS
+DISCLAIMER OF WARRANTY
-ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
+
-WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+THE LICENSED WORK IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT
-NONINFRINGEMENT. IN NO EVENT SHALL THE LICENSOR BE LIABLE FOR ANY
+WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
-CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
-TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+PURPOSE, NONINFRINGEMENT, ACCURACY, COMPLETENESS, OR RELIABILITY.
-LICENSED WORK OR THE USE OR OTHER DEALINGS IN THE LICENSED WORK.
+
+THE LICENSOR DOES NOT WARRANT THAT THE LICENSED WORK WILL:
+(A) DETECT, INTERCEPT, OR SUBSTITUTE ALL PERSONAL INFORMATION,
+    SECRETS, CREDENTIALS, OR SENSITIVE DATA IN ALL CIRCUMSTANCES;
+(B) FUNCTION CORRECTLY ON ALL WEBSITES, SERVICES, OR PLATFORMS,
+    INCLUDING AFTER THIRD-PARTY CHANGES TO THEIR INTERFACES,
+    APIs, OR DATA FORMATS;
+(C) BE FREE OF ERRORS, BUGS, INTERRUPTIONS, OR SECURITY
+    VULNERABILITIES;
+(D) MEET ANY SPECIFIC PRIVACY, SECURITY, OR REGULATORY
+    REQUIREMENTS, INCLUDING BUT NOT LIMITED TO GDPR, HIPAA,
+    CCPA, PCI-DSS, OR ANY OTHER DATA PROTECTION FRAMEWORK.
+
+LIMITATION OF LIABILITY
+
+IN NO EVENT SHALL THE LICENSOR, CONTRIBUTORS, OR DISTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+CONSEQUENTIAL, OR PUNITIVE DAMAGES (INCLUDING BUT NOT LIMITED TO
+LOSS OF DATA, LOSS OF PRIVACY, IDENTITY THEFT, UNAUTHORIZED
+DISCLOSURE OF PERSONAL INFORMATION, REGULATORY FINES OR PENALTIES,
+REPUTATIONAL HARM, LOSS OF BUSINESS, OR PROCUREMENT OF SUBSTITUTE
+SERVICES) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
+OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF OR INABILITY TO USE
+THE LICENSED WORK, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
+DAMAGES.
+
+THIS LIMITATION APPLIES REGARDLESS OF WHETHER THE FAILURE RESULTS
+FROM: (A) THIRD-PARTY CHANGES TO WEBSITES, APIs, OR SERVICES THAT
+CAUSE THE LICENSED WORK TO MALFUNCTION OR FAIL SILENTLY; (B) USER
+MISCONFIGURATION OR FAILURE TO VERIFY SUBSTITUTIONS; (C) PATTERNS,
+FORMATS, OR DATA TYPES NOT RECOGNIZED BY THE LICENSED WORK; OR
+(D) ANY OTHER CAUSE BEYOND THE LICENSOR'S REASONABLE CONTROL.
+
+COMMERCIAL LICENSEES ACKNOWLEDGE THAT COMMERCIAL LICENSE FEES ARE
+NOT INSURANCE PREMIUMS AND DO NOT CREATE ANY ADDITIONAL WARRANTY,
+INDEMNIFICATION, OR LIABILITY OBLIGATION BEYOND WHAT IS STATED IN
+THE APPLICABLE COMMERCIAL LICENSE AGREEMENT. THE LIMITATIONS AND
+DISCLAIMERS IN THIS SECTION APPLY TO ALL USERS, INCLUDING
+COMMERCIAL LICENSEES, UNLESS EXPLICITLY SUPERSEDED IN WRITING BY
+A SEPARATE COMMERCIAL LICENSE AGREEMENT.
+
+THE LICENSED WORK IS A CONVENIENCE TOOL THAT REDUCES — BUT CANNOT
+ELIMINATE — THE RISK OF INADVERTENT DISCLOSURE OF PERSONAL
+INFORMATION. USERS ARE SOLELY RESPONSIBLE FOR VERIFYING THAT
+SENSITIVE DATA HAS BEEN PROPERLY SUBSTITUTED BEFORE TRANSMISSION
+AND FOR IMPLEMENTING ADDITIONAL SAFEGUARDS APPROPRIATE TO THEIR
+USE CASE.

PRIVACY.md

@@ -62,6 +62,17 @@ If this privacy policy changes, the updated version will be posted at this URL a
 
 For questions about this privacy policy, open an issue at: https://github.com/outis1one/silent-send/issues
 
+## Limitations and disclaimer
+
+Silent Send is a convenience tool that reduces the risk of sharing personal information with third-party services. It does not guarantee complete protection. Specifically:
+
+- **Third-party changes:** Websites may change their APIs, interfaces, or data submission methods at any time. Such changes can cause Silent Send to stop intercepting or substituting data without any visible error. Silent Send contributors have no control over third-party websites and accept no responsibility for changes they make.
+- **Coverage gaps:** Silent Send may not detect personal information in images, unusual text formats, non-standard encodings, dynamically generated content, or patterns not covered by built-in or custom rules.
+- **User responsibility:** You are responsible for verifying that substitutions are applied correctly before transmitting sensitive data. The extension provides a Test tab for this purpose.
+- **Not a compliance tool:** Silent Send does not guarantee compliance with any privacy regulation (GDPR, HIPAA, CCPA, PCI-DSS, or otherwise). Organizations requiring regulatory compliance should implement appropriate professional tooling and processes.
+
+For the full limitation of liability, see the [LICENSE](LICENSE) file.
+
 ## Open source
 
 Silent Send's source code is publicly available at https://github.com/outis1one/silent-send — you can verify every claim in this policy by reading the code.

README.md

@@ -542,7 +542,19 @@ Silent Send works well for text you type and most document uploads, but some thi
 
 ## Disclaimer
 
-Silent Send is provided "as is" without warranty of any kind. It is a convenience tool that reduces the chance of accidentally sharing personal information with AI services. It is not a security guarantee and should not be your only privacy protection. The source code is available for inspection — you don't have to take our word for it.
+Silent Send is provided "as is" and "as available" without warranty of any kind, express or implied. It is a **convenience tool** that reduces — but cannot eliminate — the risk of accidentally sharing personal information with AI services. It is **not a security guarantee** and should not be your only privacy protection.
+
+**What this means in practice:**
+
+- Silent Send may fail to detect or substitute personal information in certain formats, edge cases, images, or data you haven't configured.
+- Third-party websites (ChatGPT, Claude, Gemini, Reddit, GitHub, etc.) may change their interfaces, APIs, or data submission methods at any time. Such changes can cause Silent Send to stop intercepting data **without any visible error or warning**. The Silent Send contributors have no control over and accept no responsibility for third-party changes.
+- **You are solely responsible** for verifying that your personal data has been properly substituted before sending. The Test tab in the popup is provided for this purpose.
+- Silent Send is not a substitute for professional data protection, legal compliance, or security tooling. It does not guarantee compliance with any regulation (GDPR, HIPAA, CCPA, PCI-DSS, or otherwise).
+- No contributor, maintainer, or distributor of Silent Send shall be liable for any damages arising from its use, including but not limited to privacy breaches, identity theft, data exposure, or regulatory penalties — whether caused by software bugs, third-party changes, misconfiguration, or any other reason.
+
+Commercial licensees: a commercial license grants the right to use Silent Send in a commercial context. It does not create additional warranties, indemnification, or liability obligations beyond those stated in the license agreement.
+
+The source code is available for inspection — you don't have to take our word for it.
 
 ## License
 

src/options/options.html

@@ -629,7 +629,10 @@
     </section>
 
     <footer>
-      <p>Silent Send v2.0.5</p>
+      <p>Silent Send v0.9.0</p>
+      <p style="font-size:11px;color:#9ca3af;margin-top:6px;max-width:600px">
+        Silent Send is a convenience tool, not a security guarantee. Third-party sites may change how they send data at any time, which can cause missed substitutions without warning. You are responsible for verifying your data before sending. See the <a href="https://github.com/outis1one/silent-send/blob/main/LICENSE" target="_blank" style="color:#6b7280">LICENSE</a> for full terms.
+      </p>
     </footer>
   </div>
 

src/popup/popup.html

@@ -263,9 +263,13 @@
         AES-256 encrypted at rest — unreadable without your password.</span>
       </div>
       <div class="privacy-note" style="color:#b45309;background:#fef3c7;padding:6px 8px;border-radius:4px;margin-bottom:6px">
-        Silent Send is a convenience tool, not a security guarantee. It can miss
+        Silent Send is a convenience tool, not a security guarantee. It reduces
-        PPI in images, file uploads, unusual name forms, or data you forgot to
+        but cannot eliminate the risk of sharing personal data. It may miss PPI
-        configure. Always verify sensitive messages before sending.
+        in images, unusual formats, or data you haven't configured. Third-party
+        sites may change how they send data at any time, which can cause missed
+        substitutions without warning. Always verify sensitive messages before
+        sending. By using this extension, you accept full responsibility for
+        verifying your data is protected.
       </div>
       <a href="#" id="btnOptions">Options</a>
     </footer>