diff --git a/buffit/index.html b/buffit/index.html
index fcc4d5e..f30ec18 100644
--- a/buffit/index.html
+++ b/buffit/index.html
@@ -79,6 +79,30 @@
     letter-spacing: 0.04em;
   }
 
+  .mini-nav {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 10px;
+    margin-top: 12px;
+    padding: 6px 10px;
+    border: 1px solid var(--border);
+    border-radius: 999px;
+    background: rgba(201, 169, 110, 0.08);
+  }
+
+  .mini-nav a {
+    font-size: 12px;
+    color: var(--gold);
+    text-decoration: none;
+  }
+
+  .mini-nav a:hover {
+    color: #d9bb84;
+    text-decoration: underline;
+    text-underline-offset: 2px;
+  }
+
   /* ---------- Connect screen ---------- */
   .panel {
     background: var(--bg-raised);
@@ -139,6 +163,24 @@
     line-height: 1.5;
   }
 
+  a {
+    color: var(--gold);
+    text-decoration: none;
+    transition: color 0.15s ease, text-decoration-color 0.15s ease;
+  }
+
+  a:hover {
+    color: #d9bb84;
+    text-decoration: underline;
+    text-underline-offset: 2px;
+  }
+
+  a:focus-visible {
+    outline: 2px solid var(--gold);
+    outline-offset: 2px;
+    border-radius: 2px;
+  }
+
   .field .hint a { color: var(--gold-dim); }
 
   button {
@@ -358,16 +400,22 @@
 
 <div class="wrap">
   <div class="brand">
-    <img src="https://danielmorrisey.com/media/image/seo/buffit.png" alt="BuffIT" class="logo" onerror="this.style.display='none'; document.getElementById('markFallback').style.display='block';">
+    <img src="https://danielmorrisey.com/media/images/seo/buffit.png" alt="BuffIT" class="logo" onerror="this.style.display='none'; document.getElementById('markFallback').style.display='block';">
     <div class="mark" id="markFallback" style="display:none;">BuffIT</div>
-    <div class="sub">SHARE TO BUFFER, INSTANTLY</div>
+    <div class="sub">Share your ideas and thoughts instantly</div>
+    <nav class="mini-nav" aria-label="BuffIT navigation">
+      <a href="/buffit/">Home</a>
+      <a href="/buffit/privacy.html">Privacy</a>
+    </nav>
   </div>
 
   <!-- CONNECT SCREEN -->
   <div class="connect-screen" id="connectScreen">
     <div class="panel">
       <h1>Connect your Buffer account</h1>
-      <p>This posts immediately — no queue, no scheduling. Runs entirely in your browser; nothing is sent to any server but Buffer's.</p>
+      <p>Share your ideas and thoughts instantly to your social media accounts using Buffer. Everything runs in your browser, no data is sent or stored anywhere. <br>
+        You may read our <a href="/buffit/privacy.html" target="_blank">privacy policy</a> for more information.
+      </p>
 
       <button class="btn-primary" id="connectBtn">Connect to Buffer</button>
     </div>
@@ -406,8 +454,8 @@
   const API_URL = PROXY_BASE + '/api';
   const AUTH_URL = 'https://auth.buffer.com/auth'; // top-level redirect, not a fetch — no CORS involved
   const TOKEN_URL = PROXY_BASE + '/token';
-  const SCOPES = 'posts:write posts:read account:read offline_access';
-  const CLIENT_ID = 'HN97mH57X2MKi35aXV5vlK329NIsn-G4wqxiiDFMOhd';
+  const SCOPES = 'account:read posts:write offline_access';
+  const CLIENT_ID = 'I46Qvix5aME8QhyMZlvXbJX5S890B445YJlHsw8NN-2';
   const REDIRECT_URI = 'https://danielmorrisey.com/buffit';
 
   const $ = (id) => document.getElementById(id);
diff --git a/buffit/privacy.html b/buffit/privacy.html
new file mode 100644
index 0000000..a6399e6
--- /dev/null
+++ b/buffit/privacy.html
@@ -0,0 +1,206 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>BuffIT Privacy</title>
+<link rel="icon" type="image/png" href="https://danielmorrisey.com/media/image/seo/buffit.png">
+<meta property="og:title" content="BuffIT Privacy">
+<meta property="og:description" content="How BuffIT handles your Buffer connection and posted content.">
+<meta property="og:image" content="https://danielmorrisey.com/media/image/seo/buffit.png">
+<meta name="twitter:card" content="summary">
+<meta name="twitter:title" content="BuffIT Privacy">
+<meta name="twitter:description" content="How BuffIT handles your Buffer connection and posted content.">
+<meta name="twitter:image" content="https://danielmorrisey.com/media/image/seo/buffit.png">
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link href="https://fonts.googleapis.com/css2?family=Lora:ital,wght@0,400;0,600;1,400&family=DM+Sans:wght@400;500;600&display=swap" rel="stylesheet">
+<style>
+  :root {
+    --bg: #0e0d0c;
+    --bg-raised: #16140f;
+    --border: #2a2620;
+    --gold: #c9a96e;
+    --gold-dim: #8a7550;
+    --text: #ece7dc;
+    --text-dim: #948c7a;
+    --text-faint: #5c5648;
+  }
+
+  * { box-sizing: border-box; }
+
+  html, body {
+    margin: 0;
+    padding: 0;
+    background: var(--bg);
+    color: var(--text);
+    font-family: 'DM Sans', sans-serif;
+    min-height: 100vh;
+  }
+
+  body {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+    padding: 24px;
+  }
+
+  .wrap {
+    width: 100%;
+    max-width: 760px;
+  }
+
+  .brand {
+    text-align: center;
+    margin-bottom: 28px;
+    user-select: none;
+  }
+
+  .brand .logo {
+    height: 44px;
+    width: auto;
+    margin-bottom: 4px;
+  }
+
+  .brand .mark {
+    font-family: 'Lora', serif;
+    font-style: italic;
+    font-size: 15px;
+    color: var(--gold);
+    letter-spacing: 0.02em;
+  }
+
+  .brand .sub {
+    font-size: 12px;
+    color: var(--text-faint);
+    margin-top: 4px;
+    letter-spacing: 0.04em;
+  }
+
+  .mini-nav {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 10px;
+    margin-top: 12px;
+    padding: 6px 10px;
+    border: 1px solid var(--border);
+    border-radius: 999px;
+    background: rgba(201, 169, 110, 0.08);
+  }
+
+  .mini-nav a {
+    font-size: 12px;
+    color: var(--gold);
+    text-decoration: none;
+  }
+
+  .mini-nav a:hover {
+    color: #d9bb84;
+    text-decoration: underline;
+    text-underline-offset: 2px;
+  }
+
+  .panel {
+    background: var(--bg-raised);
+    border: 1px solid var(--border);
+    border-radius: 14px;
+    padding: 36px;
+  }
+
+  .panel h1 {
+    font-family: 'Lora', serif;
+    font-weight: 600;
+    font-size: 26px;
+    margin: 0 0 10px;
+    color: var(--text);
+  }
+
+  .panel p,
+  .panel li {
+    color: var(--text-dim);
+    line-height: 1.7;
+    font-size: 14.5px;
+  }
+
+  .panel ul {
+    margin: 0 0 16px 18px;
+    padding: 0;
+  }
+
+  .panel .intro {
+    margin-bottom: 18px;
+  }
+
+  .panel .section {
+    margin-top: 20px;
+  }
+
+  .panel h2 {
+    font-family: 'Lora', serif;
+    font-size: 18px;
+    color: var(--text);
+    margin: 0 0 8px;
+  }
+
+  a {
+    color: var(--gold);
+    text-decoration: none;
+    transition: color 0.15s ease;
+  }
+
+  a:hover {
+    color: #d9bb84;
+    text-decoration: underline;
+    text-underline-offset: 2px;
+  }
+
+  footer {
+    margin-top: 20px;
+    text-align: center;
+    font-size: 12px;
+    color: var(--text-faint);
+  }
+
+  @media (max-width: 480px) {
+    .panel { padding: 24px; }
+  }
+</style>
+</head>
+<body>
+  <div class="wrap">
+    <div class="brand">
+      <img src="https://danielmorrisey.com/media/images/seo/buffit.png" alt="BuffIT" class="logo" onerror="this.style.display='none'; document.getElementById('markFallback').style.display='block';">
+      <div class="mark" id="markFallback" style="display:none;">BuffIT</div>
+      <div class="sub">Share your ideas and thoughts instantly</div>
+      <nav class="mini-nav" aria-label="BuffIT navigation">
+        <a href="/buffit/">Home</a>
+        <a href="/buffit/privacy.html">Privacy</a>
+      </nav>
+    </div>
+
+    <div class="panel">
+      <h1>Privacy</h1>
+      <p class="intro">BuffIT helps you post to your social media accounts instantly using Buffer. We do not store your Buffer credentials on our servers.</p>
+      <div class="section">
+        <h2>App Permissions</h2>
+        <p>Buffit only requests the permissions it requires to function.</p>
+        <ul>
+          <li><b>Account Read</b>: Read access to account information</li>
+          <li><b>Posts Write</b>: reate and manage posts and queue</li>
+        </ul>
+      </div>
+
+      <div class="section">
+        <h2>What is shared</h2>
+        <ul>
+          <li>The content you choose to post is sent directly to Buffer.</li>
+          <li>Your selected channels and post text are sent to Buffer when you press post.</li>
+          <li>BuffIT does not store any data on external servers/databases.</li>
+        </ul>
+      </div>
+      <p>You can always disconnect Buffit from your Buffer account at any time.</p>
+    </div>
+  </div>
+</body>
+</html>
diff --git a/css/index.css b/css/index.css
index 51c4118..0a0249c 100644
--- a/css/index.css
+++ b/css/index.css
@@ -16,7 +16,7 @@
     --font-sans:   'DM Sans', system-ui, sans-serif;
     --radius:      10px;
     --transition:  0.2s ease;
-    --max-w:       680px;
+    --max-w:       720px;
 }
 
 *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }