diff --git a/src/app/admin/pages/[id]/page.test.tsx b/src/app/admin/pages/[id]/page.test.tsx
new file mode 100644
index 0000000..8ebe542
--- /dev/null
+++ b/src/app/admin/pages/[id]/page.test.tsx
@@ -0,0 +1,163 @@
+/**
+ * Tests for admin page editor.
+ */
+
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { render, screen, waitFor } from '@testing-library/react'
+import userEvent from '@testing-library/user-event'
+import { axe } from 'vitest-axe'
+import AdminPageEditorPage from './page'
+
+const mockPush = vi.fn()
+let mockParams = { id: 'new' }
+
+vi.mock('next/navigation', () => ({
+  useRouter: () => ({ push: mockPush }),
+  usePathname: () => '/admin/pages/new',
+  useParams: () => mockParams,
+}))
+
+vi.mock('next/link', () => ({
+  default: ({
+    children,
+    href,
+    ...props
+  }: { children: React.ReactNode; href: string } & Record<string, unknown>) => (
+    <a href={href} {...props}>
+      {children}
+    </a>
+  ),
+}))
+
+vi.mock('next/image', () => ({
+  default: (props: Record<string, unknown>) => {
+    // eslint-disable-next-line @next/next/no-img-element, jsx-a11y/alt-text
+    return <img {...props} />
+  },
+}))
+
+vi.mock('@/hooks/use-auth', () => {
+  const mockAuth = {
+    user: {
+      did: 'did:plc:user-jay-001',
+      handle: 'jay.bsky.team',
+      displayName: 'Jay',
+      avatarUrl: null,
+    },
+    isAuthenticated: true,
+    isLoading: false,
+    getAccessToken: () => 'mock-access-token',
+    login: vi.fn(),
+    logout: vi.fn(),
+    setSessionFromCallback: vi.fn(),
+    authFetch: vi.fn(),
+  }
+  return { useAuth: () => mockAuth }
+})
+
+vi.mock('@/hooks/use-toast', () => ({
+  useToast: () => ({ toast: vi.fn(), dismiss: vi.fn() }),
+}))
+
+describe('AdminPageEditorPage', () => {
+  beforeEach(() => {
+    mockParams = { id: 'new' }
+    mockPush.mockClear()
+  })
+
+  describe('create mode (id === "new")', () => {
+    it('renders create page heading', () => {
+      render(<AdminPageEditorPage />)
+      expect(screen.getByRole('heading', { name: /create page/i })).toBeInTheDocument()
+    })
+
+    it('renders title input', () => {
+      render(<AdminPageEditorPage />)
+      expect(screen.getByLabelText(/title/i)).toBeInTheDocument()
+    })
+
+    it('renders slug input', () => {
+      render(<AdminPageEditorPage />)
+      expect(screen.getByLabelText(/slug/i)).toBeInTheDocument()
+    })
+
+    it('renders status select', () => {
+      render(<AdminPageEditorPage />)
+      expect(screen.getByLabelText(/status/i)).toBeInTheDocument()
+    })
+
+    it('renders meta description textarea', () => {
+      render(<AdminPageEditorPage />)
+      expect(screen.getByLabelText(/meta description/i)).toBeInTheDocument()
+    })
+
+    it('renders save and cancel buttons', () => {
+      render(<AdminPageEditorPage />)
+      expect(screen.getByRole('button', { name: /save/i })).toBeInTheDocument()
+      expect(screen.getByRole('button', { name: /cancel/i })).toBeInTheDocument()
+    })
+
+    it('does not render delete button in create mode', () => {
+      render(<AdminPageEditorPage />)
+      expect(screen.queryByRole('button', { name: /delete/i })).not.toBeInTheDocument()
+    })
+
+    it('auto-generates slug from title in create mode', async () => {
+      const user = userEvent.setup()
+      render(<AdminPageEditorPage />)
+      const titleInput = screen.getByLabelText(/title/i)
+      await user.type(titleInput, 'Hello World')
+      const slugInput = screen.getByLabelText(/slug/i) as HTMLInputElement
+      expect(slugInput.value).toBe('hello-world')
+    })
+
+    it('shows character count for meta description', async () => {
+      const user = userEvent.setup()
+      render(<AdminPageEditorPage />)
+      const metaInput = screen.getByLabelText(/meta description/i)
+      await user.type(metaInput, 'Test description')
+      expect(screen.getByText('16/320')).toBeInTheDocument()
+    })
+
+    it('navigates back on cancel', async () => {
+      const user = userEvent.setup()
+      render(<AdminPageEditorPage />)
+      await user.click(screen.getByRole('button', { name: /cancel/i }))
+      expect(mockPush).toHaveBeenCalledWith('/admin/pages')
+    })
+
+    it('passes axe accessibility check', async () => {
+      const { container } = render(<AdminPageEditorPage />)
+      const results = await axe(container)
+      expect(results).toHaveNoViolations()
+    })
+  })
+
+  describe('edit mode (id !== "new")', () => {
+    beforeEach(() => {
+      mockParams = { id: 'page-about' }
+    })
+
+    it('renders edit page heading', async () => {
+      render(<AdminPageEditorPage />)
+      await waitFor(() => {
+        expect(screen.getByRole('heading', { name: /edit page/i })).toBeInTheDocument()
+      })
+    })
+
+    it('populates form with existing page data', async () => {
+      render(<AdminPageEditorPage />)
+      await waitFor(() => {
+        const titleInput = screen.getByLabelText(/title/i) as HTMLInputElement
+        expect(titleInput.value).toBe('About This Community')
+      })
+    })
+
+    it('renders delete button in edit mode', async () => {
+      render(<AdminPageEditorPage />)
+      await waitFor(() => {
+        expect(screen.getByRole('button', { name: /delete/i })).toBeInTheDocument()
+      })
+    })
+  })
+})
diff --git a/src/app/admin/pages/[id]/page.tsx b/src/app/admin/pages/[id]/page.tsx
new file mode 100644
index 0000000..cf03f15
--- /dev/null
+++ b/src/app/admin/pages/[id]/page.tsx
@@ -0,0 +1,191 @@
+/**
+ * Admin page editor - Create or edit a static page.
+ * URL: /admin/pages/new (create) or /admin/pages/{id} (edit)
+ */
+
+'use client'
+
+import { useState, useEffect, useCallback } from 'react'
+import { useRouter, useParams } from 'next/navigation'
+import { AdminLayout } from '@/components/admin/admin-layout'
+import { ErrorAlert } from '@/components/error-alert'
+import { PageForm } from '@/components/admin/pages/page-form'
+import { generateSlug } from '@/components/admin/pages/slug-generator'
+import { getAdminPage, getAdminPages, createPage, updatePage, deletePage } from '@/lib/api/client'
+import type { PageStatus, PageTreeNode } from '@/lib/api/types'
+import { useAuth } from '@/hooks/use-auth'
+import { useToast } from '@/hooks/use-toast'
+
+interface PageFormState {
+  title: string
+  slug: string
+  status: PageStatus
+  parentId: string | null
+  metaDescription: string
+  content: string
+}
+
+const INITIAL_FORM: PageFormState = {
+  title: '',
+  slug: '',
+  status: 'draft',
+  parentId: null,
+  metaDescription: '',
+  content: '',
+}
+
+export default function AdminPageEditorPage() {
+  const router = useRouter()
+  const params = useParams()
+  const id = params.id as string
+  const isCreateMode = id === 'new'
+
+  const { getAccessToken } = useAuth()
+  const { toast } = useToast()
+
+  const [form, setForm] = useState<PageFormState>(INITIAL_FORM)
+  const [availablePages, setAvailablePages] = useState<PageTreeNode[]>([])
+  const [loading, setLoading] = useState(!isCreateMode)
+  const [saving, setSaving] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  const flattenPages = useCallback(
+    (nodes: PageTreeNode[], result: PageTreeNode[] = []): PageTreeNode[] => {
+      for (const node of nodes) {
+        if (node.id !== id) {
+          result.push(node)
+          flattenPages(node.children, result)
+        }
+        // Skip descendants of the current page entirely
+      }
+      return result
+    },
+    [id]
+  )
+
+  useEffect(() => {
+    const loadData = async () => {
+      const token = getAccessToken() ?? ''
+      try {
+        const pagesResponse = await getAdminPages(token)
+        setAvailablePages(flattenPages(pagesResponse.pages))
+
+        if (!isCreateMode) {
+          const page = await getAdminPage(id, token)
+          setForm({
+            title: page.title,
+            slug: page.slug,
+            status: page.status,
+            parentId: page.parentId,
+            metaDescription: page.metaDescription ?? '',
+            content: page.content,
+          })
+        }
+      } catch {
+        setError('Failed to load page data.')
+      } finally {
+        setLoading(false)
+      }
+    }
+    void loadData()
+  }, [id, isCreateMode, getAccessToken, flattenPages])
+
+  const handleTitleChange = (value: string) => {
+    setForm((prev) => ({
+      ...prev,
+      title: value,
+      ...(isCreateMode ? { slug: generateSlug(value) } : {}),
+    }))
+  }
+
+  const handleSave = async () => {
+    if (!form.title.trim() || !form.slug.trim()) {
+      setError('Title and slug are required.')
+      return
+    }
+
+    setSaving(true)
+    setError(null)
+
+    try {
+      const token = getAccessToken() ?? ''
+      const input = {
+        title: form.title,
+        slug: form.slug,
+        content: form.content,
+        status: form.status,
+        metaDescription: form.metaDescription || null,
+        parentId: form.parentId,
+      }
+
+      if (isCreateMode) {
+        await createPage(input, token)
+        toast({ title: 'Page created' })
+      } else {
+        await updatePage(id, input, token)
+        toast({ title: 'Page updated' })
+      }
+      router.push('/admin/pages')
+    } catch {
+      setError('Failed to save page. Please try again.')
+    } finally {
+      setSaving(false)
+    }
+  }
+
+  const handleDelete = async () => {
+    const confirmed = window.confirm('Are you sure you want to delete this page?')
+    if (!confirmed) return
+
+    try {
+      await deletePage(id, getAccessToken() ?? '')
+      toast({ title: 'Page deleted' })
+      router.push('/admin/pages')
+    } catch {
+      setError('Failed to delete page. Please try again.')
+    }
+  }
+
+  if (loading) {
+    return (
+      <AdminLayout>
+        <p className="text-sm text-muted-foreground">Loading page...</p>
+      </AdminLayout>
+    )
+  }
+
+  return (
+    <AdminLayout>
+      <div className="mx-auto max-w-3xl space-y-6">
+        <h1 className="text-2xl font-bold text-foreground">
+          {isCreateMode ? 'Create Page' : 'Edit Page'}
+        </h1>
+
+        {error && <ErrorAlert message={error} onDismiss={() => setError(null)} />}
+
+        <PageForm
+          title={form.title}
+          slug={form.slug}
+          content={form.content}
+          status={form.status}
+          parentId={form.parentId}
+          metaDescription={form.metaDescription}
+          isEditMode={!isCreateMode}
+          availableParents={availablePages}
+          onTitleChange={handleTitleChange}
+          onSlugChange={(slug) => setForm((prev) => ({ ...prev, slug }))}
+          onContentChange={(content) => setForm((prev) => ({ ...prev, content }))}
+          onStatusChange={(status) => setForm((prev) => ({ ...prev, status }))}
+          onParentIdChange={(parentId) => setForm((prev) => ({ ...prev, parentId }))}
+          onMetaDescriptionChange={(metaDescription) =>
+            setForm((prev) => ({ ...prev, metaDescription }))
+          }
+          onSave={() => void handleSave()}
+          onCancel={() => router.push('/admin/pages')}
+          onDelete={() => void handleDelete()}
+          saving={saving}
+        />
+      </div>
+    </AdminLayout>
+  )
+}
diff --git a/src/app/admin/pages/page.test.tsx b/src/app/admin/pages/page.test.tsx
new file mode 100644
index 0000000..0bc23ec
--- /dev/null
+++ b/src/app/admin/pages/page.test.tsx
@@ -0,0 +1,102 @@
+/**
+ * Tests for admin pages list page.
+ */
+
+import { describe, it, expect, vi } from 'vitest'
+import { render, screen, waitFor } from '@testing-library/react'
+import { axe } from 'vitest-axe'
+import AdminPagesPage from './page'
+
+const mockPush = vi.fn()
+
+vi.mock('next/navigation', () => ({
+  useRouter: () => ({ push: mockPush }),
+  usePathname: () => '/admin/pages',
+}))
+
+vi.mock('next/link', () => ({
+  default: ({
+    children,
+    href,
+    ...props
+  }: { children: React.ReactNode; href: string } & Record<string, unknown>) => (
+    <a href={href} {...props}>
+      {children}
+    </a>
+  ),
+}))
+
+vi.mock('next/image', () => ({
+  default: (props: Record<string, unknown>) => {
+    // eslint-disable-next-line @next/next/no-img-element, jsx-a11y/alt-text
+    return <img {...props} />
+  },
+}))
+
+vi.mock('@/hooks/use-auth', () => {
+  const mockAuth = {
+    user: {
+      did: 'did:plc:user-jay-001',
+      handle: 'jay.bsky.team',
+      displayName: 'Jay',
+      avatarUrl: null,
+    },
+    isAuthenticated: true,
+    isLoading: false,
+    getAccessToken: () => 'mock-access-token',
+    login: vi.fn(),
+    logout: vi.fn(),
+    setSessionFromCallback: vi.fn(),
+    authFetch: vi.fn(),
+  }
+  return { useAuth: () => mockAuth }
+})
+
+vi.mock('@/hooks/use-toast', () => ({
+  useToast: () => ({ toast: vi.fn(), dismiss: vi.fn() }),
+}))
+
+describe('AdminPagesPage', () => {
+  it('renders pages heading', () => {
+    render(<AdminPagesPage />)
+    expect(screen.getByRole('heading', { name: /pages/i })).toBeInTheDocument()
+  })
+
+  it('renders add page button', () => {
+    render(<AdminPagesPage />)
+    expect(screen.getByRole('button', { name: /add page/i })).toBeInTheDocument()
+  })
+
+  it('renders pages from API', async () => {
+    render(<AdminPagesPage />)
+    await waitFor(() => {
+      expect(screen.getByText('About This Community')).toBeInTheDocument()
+    })
+    expect(screen.getByText('Privacy Policy')).toBeInTheDocument()
+    expect(screen.getByText('Terms of Service')).toBeInTheDocument()
+  })
+
+  it('renders page status badges', async () => {
+    render(<AdminPagesPage />)
+    await waitFor(() => {
+      expect(screen.getAllByText('Published').length).toBeGreaterThan(0)
+    })
+    expect(screen.getByText('Draft')).toBeInTheDocument()
+  })
+
+  it('navigates to new page editor on add button click', async () => {
+    const user = (await import('@testing-library/user-event')).default.setup()
+    render(<AdminPagesPage />)
+    await user.click(screen.getByRole('button', { name: /add page/i }))
+    expect(mockPush).toHaveBeenCalledWith('/admin/pages/new')
+  })
+
+  it('passes axe accessibility check', async () => {
+    const { container } = render(<AdminPagesPage />)
+    await waitFor(() => {
+      expect(screen.getByText('About This Community')).toBeInTheDocument()
+    })
+    const results = await axe(container)
+    expect(results).toHaveNoViolations()
+  })
+})
diff --git a/src/app/admin/pages/page.tsx b/src/app/admin/pages/page.tsx
new file mode 100644
index 0000000..c29b0e4
--- /dev/null
+++ b/src/app/admin/pages/page.tsx
@@ -0,0 +1,104 @@
+/**
+ * Admin pages list page.
+ * URL: /admin/pages
+ * Page tree with status badges and CRUD controls.
+ */
+
+'use client'
+
+import { useState, useEffect, useCallback } from 'react'
+import { useRouter } from 'next/navigation'
+import { Plus } from '@phosphor-icons/react'
+import { AdminLayout } from '@/components/admin/admin-layout'
+import { ErrorAlert } from '@/components/error-alert'
+import { PageRow } from '@/components/admin/pages/page-row'
+import { getAdminPages, deletePage } from '@/lib/api/client'
+import type { PageTreeNode } from '@/lib/api/types'
+import { useAuth } from '@/hooks/use-auth'
+import { useToast } from '@/hooks/use-toast'
+
+export default function AdminPagesPage() {
+  const router = useRouter()
+  const { getAccessToken } = useAuth()
+  const { toast } = useToast()
+  const [pages, setPages] = useState<PageTreeNode[]>([])
+  const [loading, setLoading] = useState(true)
+  const [loadError, setLoadError] = useState<string | null>(null)
+  const [actionError, setActionError] = useState<string | null>(null)
+
+  const fetchPages = useCallback(async () => {
+    setLoadError(null)
+    try {
+      const response = await getAdminPages(getAccessToken() ?? '')
+      setPages(response.pages)
+    } catch {
+      setLoadError('Failed to load pages. The API may be unreachable.')
+    } finally {
+      setLoading(false)
+    }
+  }, [getAccessToken])
+
+  useEffect(() => {
+    void fetchPages()
+  }, [fetchPages])
+
+  const handleDelete = async (id: string) => {
+    setActionError(null)
+    const confirmed = window.confirm('Are you sure you want to delete this page?')
+    if (!confirmed) return
+
+    try {
+      await deletePage(id, getAccessToken() ?? '')
+      void fetchPages()
+      toast({ title: 'Page deleted' })
+    } catch {
+      setActionError('Failed to delete page. Please try again.')
+    }
+  }
+
+  return (
+    <AdminLayout>
+      <div className="space-y-6">
+        <div className="flex items-center justify-between">
+          <h1 className="text-2xl font-bold text-foreground">Pages</h1>
+          <button
+            type="button"
+            onClick={() => router.push('/admin/pages/new')}
+            className="flex items-center gap-1.5 rounded-md bg-primary px-3 py-1.5 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90"
+          >
+            <Plus size={16} aria-hidden="true" />
+            Add Page
+          </button>
+        </div>
+
+        {actionError && <ErrorAlert message={actionError} onDismiss={() => setActionError(null)} />}
+
+        {loadError && (
+          <ErrorAlert message={loadError} variant="page" onRetry={() => void fetchPages()} />
+        )}
+
+        {loading && <p className="text-sm text-muted-foreground">Loading pages...</p>}
+
+        {!loading && pages.length === 0 && (
+          <p className="py-8 text-center text-muted-foreground">
+            No pages yet. Create your first page for static content like About, Privacy Policy, or
+            Terms of Service.
+          </p>
+        )}
+
+        {!loading && pages.length > 0 && (
+          <div className="space-y-2">
+            {pages.map((page) => (
+              <PageRow
+                key={page.id}
+                page={page}
+                depth={0}
+                onDelete={(id) => void handleDelete(id)}
+              />
+            ))}
+          </div>
+        )}
+      </div>
+    </AdminLayout>
+  )
+}
diff --git a/src/app/legal/cookies/page.test.tsx b/src/app/legal/cookies/page.test.tsx
deleted file mode 100644
index b5b6313..0000000
--- a/src/app/legal/cookies/page.test.tsx
+++ /dev/null
@@ -1,86 +0,0 @@
-/**
- * Tests for cookie policy page.
- * @see decisions/legal.md
- */
-
-import { describe, it, expect, vi } from 'vitest'
-import { render, screen } from '@testing-library/react'
-import { axe } from 'vitest-axe'
-import CookiePolicyPage from './page'
-
-// Mock next/navigation
-vi.mock('next/navigation', () => ({
-  usePathname: () => '/legal/cookies',
-  useRouter: () => ({ push: vi.fn() }),
-}))
-
-// Mock next-themes
-vi.mock('next-themes', () => ({
-  useTheme: () => ({ theme: 'dark', setTheme: vi.fn() }),
-  ThemeProvider: ({ children }: { children: React.ReactNode }) => children,
-}))
-
-// Mock useAuth hook
-vi.mock('@/hooks/use-auth', () => ({
-  useAuth: () => ({
-    user: null,
-    isAuthenticated: false,
-    isLoading: false,
-    getAccessToken: () => null,
-    login: vi.fn(),
-    logout: vi.fn(),
-    setSessionFromCallback: vi.fn(),
-    authFetch: vi.fn(),
-  }),
-}))
-
-describe('CookiePolicyPage', () => {
-  it('renders page heading', async () => {
-    const page = await CookiePolicyPage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /cookie policy/i, level: 1 })).toBeInTheDocument()
-  })
-
-  it('describes the single essential cookie', async () => {
-    const page = await CookiePolicyPage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /cookies we use/i })).toBeInTheDocument()
-    // Table shows the refresh token cookie details
-    expect(screen.getByRole('table')).toBeInTheDocument()
-    expect(screen.getByText('Refresh token')).toBeInTheDocument()
-  })
-
-  it('lists cookie security properties', async () => {
-    const page = await CookiePolicyPage()
-    render(page)
-    expect(screen.getByText(/HTTP-only/i)).toBeInTheDocument()
-    expect(screen.getByText(/SameSite=Strict/i)).toBeInTheDocument()
-  })
-
-  it('states no tracking cookies are used', async () => {
-    const page = await CookiePolicyPage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /what we do not use/i })).toBeInTheDocument()
-    expect(screen.getByText(/no tracking or advertising cookies/i)).toBeInTheDocument()
-  })
-
-  it('explains cookie consent exemption', async () => {
-    const page = await CookiePolicyPage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /cookie consent/i })).toBeInTheDocument()
-    expect(screen.getByText(/ePrivacy Directive/i)).toBeInTheDocument()
-  })
-
-  it('renders breadcrumbs', async () => {
-    const page = await CookiePolicyPage()
-    render(page)
-    expect(screen.getByText('Home')).toBeInTheDocument()
-  })
-
-  it('passes axe accessibility check', async () => {
-    const page = await CookiePolicyPage()
-    const { container } = render(page)
-    const results = await axe(container)
-    expect(results).toHaveNoViolations()
-  })
-})
diff --git a/src/app/legal/cookies/page.tsx b/src/app/legal/cookies/page.tsx
deleted file mode 100644
index abc108e..0000000
--- a/src/app/legal/cookies/page.tsx
+++ /dev/null
@@ -1,136 +0,0 @@
-/**
- * Cookie policy page.
- * URL: /legal/cookies
- * Static placeholder content -- admin-editable in P3+.
- * @see decisions/legal.md
- */
-
-import type { Metadata } from 'next'
-import { getPublicSettings } from '@/lib/api/client'
-import { ForumLayout } from '@/components/layout/forum-layout'
-import { Breadcrumbs } from '@/components/breadcrumbs'
-
-export const metadata: Metadata = {
-  title: 'Cookie Policy',
-  description:
-    'How Barazo uses cookies. We use a single essential cookie for authentication -- no tracking or analytics cookies.',
-  alternates: {
-    canonical: '/legal/cookies',
-  },
-}
-
-export default async function CookiePolicyPage() {
-  let communityName = ''
-  try {
-    const settings = await getPublicSettings()
-    communityName = settings.communityName
-  } catch {
-    // silently degrade
-  }
-
-  return (
-    <ForumLayout communityName={communityName}>
-      <div className="mx-auto max-w-2xl space-y-8">
-        <Breadcrumbs items={[{ label: 'Home', href: '/' }, { label: 'Cookie policy' }]} />
-
-        <h1 className="text-2xl font-bold text-foreground">Cookie policy</h1>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Overview</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo uses a minimal number of cookies. We do not use tracking cookies, advertising
-            cookies, or third-party analytics cookies. This page explains the cookies we do use and
-            why.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Cookies we use</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo uses a single essential cookie:
-          </p>
-          <div className="overflow-x-auto">
-            <table className="w-full text-sm text-muted-foreground">
-              <thead>
-                <tr className="border-b border-border text-left">
-                  <th className="pb-2 pr-4 font-semibold text-foreground">Cookie</th>
-                  <th className="pb-2 pr-4 font-semibold text-foreground">Purpose</th>
-                  <th className="pb-2 pr-4 font-semibold text-foreground">Duration</th>
-                  <th className="pb-2 font-semibold text-foreground">Type</th>
-                </tr>
-              </thead>
-              <tbody>
-                <tr className="border-b border-border/50">
-                  <td className="py-2 pr-4">Refresh token</td>
-                  <td className="py-2 pr-4">
-                    Keeps you logged in across page reloads by enabling silent access token renewal.
-                  </td>
-                  <td className="py-2 pr-4">Session</td>
-                  <td className="py-2">Essential</td>
-                </tr>
-              </tbody>
-            </table>
-          </div>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Technical details</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            The refresh token cookie has the following security properties:
-          </p>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>
-              <strong>HTTP-only</strong> -- the cookie is not accessible to JavaScript, preventing
-              cross-site scripting (XSS) attacks.
-            </li>
-            <li>
-              <strong>Secure</strong> -- the cookie is only sent over HTTPS connections.
-            </li>
-            <li>
-              <strong>SameSite=Strict</strong> -- the cookie is not sent with cross-site requests,
-              preventing cross-site request forgery (CSRF) attacks.
-            </li>
-          </ul>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Access tokens (used to authenticate API requests) are held in memory only and are never
-            stored in cookies, localStorage, or sessionStorage.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">What we do not use</h2>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>No tracking or advertising cookies.</li>
-            <li>No third-party analytics (Google Analytics, etc.).</li>
-            <li>No social media tracking pixels.</li>
-            <li>No fingerprinting or behavioral profiling.</li>
-          </ul>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Cookie consent</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Because we only use a single essential cookie required for the service to function, a
-            cookie consent banner is not required under the ePrivacy Directive (EU Directive
-            2002/58/EC, Art. 5(3)). Essential cookies that are strictly necessary for the service
-            requested by the user are exempt from the consent requirement.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Theme preference</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Your light/dark mode preference is stored in localStorage (not a cookie). This is a
-            client-side preference that is never sent to our servers.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <p className="text-xs text-muted-foreground">
-            This policy was last updated on February 2026.
-          </p>
-        </section>
-      </div>
-    </ForumLayout>
-  )
-}
diff --git a/src/app/legal/privacy/page.test.tsx b/src/app/legal/privacy/page.test.tsx
deleted file mode 100644
index 4fc261f..0000000
--- a/src/app/legal/privacy/page.test.tsx
+++ /dev/null
@@ -1,124 +0,0 @@
-/**
- * Tests for privacy policy page.
- * @see decisions/legal.md
- */
-
-import { describe, it, expect, vi } from 'vitest'
-import { render, screen } from '@testing-library/react'
-import { axe } from 'vitest-axe'
-import PrivacyPolicyPage from './page'
-
-// Mock next/navigation
-vi.mock('next/navigation', () => ({
-  usePathname: () => '/legal/privacy',
-  useRouter: () => ({ push: vi.fn() }),
-}))
-
-// Mock next-themes
-vi.mock('next-themes', () => ({
-  useTheme: () => ({ theme: 'dark', setTheme: vi.fn() }),
-  ThemeProvider: ({ children }: { children: React.ReactNode }) => children,
-}))
-
-// Mock useAuth hook
-vi.mock('@/hooks/use-auth', () => ({
-  useAuth: () => ({
-    user: null,
-    isAuthenticated: false,
-    isLoading: false,
-    getAccessToken: () => null,
-    login: vi.fn(),
-    logout: vi.fn(),
-    setSessionFromCallback: vi.fn(),
-    authFetch: vi.fn(),
-  }),
-}))
-
-describe('PrivacyPolicyPage', () => {
-  it('renders page heading', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /privacy policy/i, level: 1 })).toBeInTheDocument()
-  })
-
-  it('describes what data is collected', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /what we collect/i })).toBeInTheDocument()
-    expect(screen.getByText(/AT Protocol identifiers/i)).toBeInTheDocument()
-  })
-
-  it('describes authentication cookie instead of generic session data', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(screen.getByText(/Authentication cookie/i)).toBeInTheDocument()
-    expect(screen.getByText(/HTTP-only, Secure, SameSite=Strict/i)).toBeInTheDocument()
-  })
-
-  it('lists age declaration and per-community preferences', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(screen.getByText(/Age declaration/i)).toBeInTheDocument()
-    expect(screen.getByText(/Per-community preferences/i)).toBeInTheDocument()
-  })
-
-  it('describes what data is not collected', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /what we do not collect/i })).toBeInTheDocument()
-    expect(screen.getByText(/device fingerprinting/i)).toBeInTheDocument()
-  })
-
-  it('describes anonymize-on-deletion approach', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(
-      screen.getByRole('heading', { name: /data retention and deletion/i })
-    ).toBeInTheDocument()
-    expect(screen.getByText(/deleted by author/i)).toBeInTheDocument()
-    expect(screen.getByText(/personal data.*is stripped/i)).toBeInTheDocument()
-    expect(screen.getByText(/anonymized content.*may be retained/i)).toBeInTheDocument()
-  })
-
-  it('describes AI features', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /ai features/i })).toBeInTheDocument()
-    expect(screen.getByText(/No training on your content/i)).toBeInTheDocument()
-    expect(screen.getByText(/Local-first processing/i)).toBeInTheDocument()
-    expect(screen.getByText(/Anonymized summaries/i)).toBeInTheDocument()
-  })
-
-  it('lists user rights under GDPR', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /your rights/i })).toBeInTheDocument()
-    expect(screen.getByText(/right to be forgotten/i)).toBeInTheDocument()
-  })
-
-  it('links to barazo-workspace for issue tracking', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    const link = screen.getByRole('link', { name: /github issue tracker/i })
-    expect(link).toHaveAttribute('href', 'https://github.com/barazo-forum/barazo-workspace/issues')
-  })
-
-  it('mentions GDPR compliance', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(screen.getByText(/General Data Protection Regulation/i)).toBeInTheDocument()
-  })
-
-  it('renders breadcrumbs', async () => {
-    const page = await PrivacyPolicyPage()
-    render(page)
-    expect(screen.getByText('Home')).toBeInTheDocument()
-  })
-
-  it('passes axe accessibility check', async () => {
-    const page = await PrivacyPolicyPage()
-    const { container } = render(page)
-    const results = await axe(container)
-    expect(results).toHaveNoViolations()
-  })
-})
diff --git a/src/app/legal/privacy/page.tsx b/src/app/legal/privacy/page.tsx
deleted file mode 100644
index 362b065..0000000
--- a/src/app/legal/privacy/page.tsx
+++ /dev/null
@@ -1,261 +0,0 @@
-/**
- * Privacy policy page.
- * URL: /legal/privacy
- * Static placeholder content -- admin-editable in P3+.
- * @see decisions/legal.md
- */
-
-import type { Metadata } from 'next'
-import { getPublicSettings } from '@/lib/api/client'
-import { ForumLayout } from '@/components/layout/forum-layout'
-import { Breadcrumbs } from '@/components/breadcrumbs'
-
-export const metadata: Metadata = {
-  title: 'Privacy Policy',
-  description:
-    'How Barazo collects, uses, and protects your personal data. GDPR-compliant privacy policy.',
-  alternates: {
-    canonical: '/legal/privacy',
-  },
-}
-
-export default async function PrivacyPolicyPage() {
-  let communityName = ''
-  try {
-    const settings = await getPublicSettings()
-    communityName = settings.communityName
-  } catch {
-    // silently degrade
-  }
-
-  return (
-    <ForumLayout communityName={communityName}>
-      <div className="mx-auto max-w-2xl space-y-8">
-        <Breadcrumbs items={[{ label: 'Home', href: '/' }, { label: 'Privacy policy' }]} />
-
-        <h1 className="text-2xl font-bold text-foreground">Privacy policy</h1>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Overview</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo is committed to protecting your privacy. This policy explains what personal data
-            we collect, why we collect it, how long we keep it, and what rights you have. Barazo is
-            operated from the Netherlands and complies with the General Data Protection Regulation
-            (GDPR).
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">What we collect</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            When you use Barazo, we process the following data:
-          </p>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>
-              <strong>AT Protocol identifiers</strong> -- your DID (decentralized identifier) and
-              handle, used to identify your account.
-            </li>
-            <li>
-              <strong>Profile information</strong> -- display name and profile data retrieved from
-              your AT Protocol PDS.
-            </li>
-            <li>
-              <strong>Content</strong> -- posts, replies, and reactions you create on the forum,
-              indexed from the AT Protocol firehose.
-            </li>
-            <li>
-              <strong>IP addresses</strong> -- collected for API rate limiting and security
-              purposes.
-            </li>
-            <li>
-              <strong>Authentication cookie</strong> -- a single HTTP-only, Secure, SameSite=Strict
-              refresh token cookie used to maintain your session. Access tokens are held in memory
-              only and never stored in cookies or browser storage.
-            </li>
-            <li>
-              <strong>Moderation records</strong> -- actions taken by moderators on your content or
-              account.
-            </li>
-            <li>
-              <strong>Age declaration</strong> -- stored in the forum database only (deliberately
-              kept off your PDS to avoid broadcasting age data on a public network).
-            </li>
-            <li>
-              <strong>Per-community preferences</strong> -- notification settings and content
-              maturity overrides, stored locally in the forum database (not on your PDS) to protect
-              your browsing patterns.
-            </li>
-          </ul>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">What we do not collect</h2>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>
-              We do not collect or store your password (authentication is handled via AT Protocol
-              OAuth).
-            </li>
-            <li>
-              We do not collect email addresses unless provided by a community admin for billing.
-            </li>
-            <li>We do not collect payment card details (processed by our payment provider).</li>
-            <li>We do not use tracking cookies or analytics that profile your behavior.</li>
-            <li>We do not use device fingerprinting.</li>
-            <li>We do not load third-party trackers, pixels, or analytics scripts.</li>
-          </ul>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Legal basis</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            We process your data under the following legal bases (GDPR Art. 6):
-          </p>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>
-              <strong>Contract performance</strong> -- processing necessary to provide the forum
-              service you signed up for.
-            </li>
-            <li>
-              <strong>Legitimate interest</strong> -- indexing public AT Protocol content, spam
-              prevention, platform security, content moderation, and AI-generated discussion
-              summaries.
-            </li>
-          </ul>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Data storage and transfers</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Our servers are hosted in the European Union (Hetzner, Germany). We use the following
-            sub-processors:
-          </p>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>Hetzner (EU) -- hosting infrastructure.</li>
-            <li>Bunny.net (EU, Slovenia) -- content delivery network.</li>
-            <li>Stripe (EU-US Data Privacy Framework certified) -- payment processing.</li>
-          </ul>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            A full sub-processor list is maintained at{' '}
-            <strong>barazo.forum/legal/sub-processors</strong>.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Data retention and deletion</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Your indexed data is retained while the source exists on your AT Protocol PDS. When you
-            delete content or your account via the AT Protocol, we process the deletion event
-            immediately:
-          </p>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>
-              Your post is removed from public view and replaced with a &quot;deleted by
-              author&quot; notice.
-            </li>
-            <li>
-              Your personal data (DID, handle, AT Protocol URI) is stripped from the database
-              record.
-            </li>
-            <li>
-              The anonymized content (with no link to your identity) may be retained to preserve
-              community knowledge and enable AI-generated discussion summaries. This anonymized data
-              falls outside GDPR scope (Recital 26) because it can no longer identify you.
-            </li>
-          </ul>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            You may request full content deletion (including anonymized content) by contacting us
-            directly, independent of AT Protocol signals. We respond to deletion requests within one
-            month (GDPR Art. 12(3)).
-          </p>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo cannot guarantee deletion from external systems such as AT Protocol relays, other
-            AppViews, search engine caches, or web archives. Our reasonable steps include:
-            propagating AT Protocol delete events, submitting Google Search Console removal requests
-            for deleted content URLs, and documenting which systems confirmed deletion.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">AI features</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo offers optional AI features including thread summaries, semantic search, and
-            content moderation assistance. Here is how they work:
-          </p>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>
-              <strong>No training on your content.</strong> We do not use member posts to train AI
-              models, and we do not provide member content to others for training.
-            </li>
-            <li>
-              <strong>Local-first processing.</strong> The default AI configuration uses local
-              inference (Ollama) -- your content never leaves the server. Your forum administrator
-              may choose a different AI provider; in that case, content is sent to that provider for
-              processing.
-            </li>
-            <li>
-              <strong>Anonymized summaries.</strong> AI-generated thread summaries are designed to
-              exclude usernames, handles, and verbatim quotes. Summaries capture the
-              discussion&apos;s substance, not who said what. Summaries may persist after individual
-              content deletion because they contain no personal data.
-            </li>
-          </ul>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Content labels</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            We subscribe to content labeling services (such as Bluesky&apos;s Ozone) for spam
-            detection and content moderation. Labels applied to your account may affect posting
-            limits and content visibility. Labels are stored by the labeler service, not on your
-            PDS. You can dispute labels by contacting us.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Your rights</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Under the GDPR, you have the right to:
-          </p>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>Access the personal data we hold about you.</li>
-            <li>Rectify inaccurate data.</li>
-            <li>Request erasure of your data (right to be forgotten).</li>
-            <li>Object to processing based on legitimate interest.</li>
-            <li>Data portability (built into the AT Protocol).</li>
-            <li>
-              Lodge a complaint with the Dutch Data Protection Authority (Autoriteit
-              Persoonsgegevens).
-            </li>
-          </ul>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            To exercise these rights, contact us through our{' '}
-            <a
-              href="https://github.com/barazo-forum/barazo-workspace/issues"
-              className="text-primary underline hover:text-primary/80"
-              target="_blank"
-              rel="noopener noreferrer"
-            >
-              GitHub issue tracker
-            </a>{' '}
-            or via the contact details provided by your community administrator.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Data breach notification</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            In the event of a data breach, we will notify the Dutch Data Protection Authority within
-            72 hours (GDPR Art. 33). For high-risk breaches, we will notify affected users without
-            undue delay via AT Protocol notifications and public announcements.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <p className="text-xs text-muted-foreground">
-            This policy was last updated on February 2026.
-          </p>
-        </section>
-      </div>
-    </ForumLayout>
-  )
-}
diff --git a/src/app/legal/terms/page.test.tsx b/src/app/legal/terms/page.test.tsx
deleted file mode 100644
index aa19242..0000000
--- a/src/app/legal/terms/page.test.tsx
+++ /dev/null
@@ -1,87 +0,0 @@
-/**
- * Tests for terms of service page.
- * @see decisions/legal.md
- */
-
-import { describe, it, expect, vi } from 'vitest'
-import { render, screen } from '@testing-library/react'
-import { axe } from 'vitest-axe'
-import TermsOfServicePage from './page'
-
-// Mock next/navigation
-vi.mock('next/navigation', () => ({
-  usePathname: () => '/legal/terms',
-  useRouter: () => ({ push: vi.fn() }),
-}))
-
-// Mock next-themes
-vi.mock('next-themes', () => ({
-  useTheme: () => ({ theme: 'dark', setTheme: vi.fn() }),
-  ThemeProvider: ({ children }: { children: React.ReactNode }) => children,
-}))
-
-// Mock useAuth hook
-vi.mock('@/hooks/use-auth', () => ({
-  useAuth: () => ({
-    user: null,
-    isAuthenticated: false,
-    isLoading: false,
-    getAccessToken: () => null,
-    login: vi.fn(),
-    logout: vi.fn(),
-    setSessionFromCallback: vi.fn(),
-    authFetch: vi.fn(),
-  }),
-}))
-
-describe('TermsOfServicePage', () => {
-  it('renders page heading', async () => {
-    const page = await TermsOfServicePage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /terms of service/i, level: 1 })).toBeInTheDocument()
-  })
-
-  it('states minimum age requirement', async () => {
-    const page = await TermsOfServicePage()
-    render(page)
-    expect(screen.getByText(/at least 16 years old/i)).toBeInTheDocument()
-  })
-
-  it('covers content and conduct rules', async () => {
-    const page = await TermsOfServicePage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /content and conduct/i })).toBeInTheDocument()
-  })
-
-  it('discloses AI summary behavior', async () => {
-    const page = await TermsOfServicePage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /ai-generated summaries/i })).toBeInTheDocument()
-    expect(screen.getByText(/summaries may persist/i)).toBeInTheDocument()
-  })
-
-  it('discloses moderation labels', async () => {
-    const page = await TermsOfServicePage()
-    render(page)
-    expect(screen.getByRole('heading', { name: /moderation and labels/i })).toBeInTheDocument()
-  })
-
-  it('specifies governing law', async () => {
-    const page = await TermsOfServicePage()
-    render(page)
-    expect(screen.getByText(/laws of the Netherlands/i)).toBeInTheDocument()
-  })
-
-  it('renders breadcrumbs', async () => {
-    const page = await TermsOfServicePage()
-    render(page)
-    expect(screen.getByText('Home')).toBeInTheDocument()
-  })
-
-  it('passes axe accessibility check', async () => {
-    const page = await TermsOfServicePage()
-    const { container } = render(page)
-    const results = await axe(container)
-    expect(results).toHaveNoViolations()
-  })
-})
diff --git a/src/app/legal/terms/page.tsx b/src/app/legal/terms/page.tsx
deleted file mode 100644
index aaa1c02..0000000
--- a/src/app/legal/terms/page.tsx
+++ /dev/null
@@ -1,174 +0,0 @@
-/**
- * Terms of service page.
- * URL: /legal/terms
- * Static placeholder content -- admin-editable in P3+.
- * @see decisions/legal.md
- */
-
-import type { Metadata } from 'next'
-import { getPublicSettings } from '@/lib/api/client'
-import { ForumLayout } from '@/components/layout/forum-layout'
-import { Breadcrumbs } from '@/components/breadcrumbs'
-
-export const metadata: Metadata = {
-  title: 'Terms of Service',
-  description:
-    'Terms and conditions for using Barazo forum communities. Covers usage rules, content policies, and user responsibilities.',
-  alternates: {
-    canonical: '/legal/terms',
-  },
-}
-
-export default async function TermsOfServicePage() {
-  let communityName = ''
-  try {
-    const settings = await getPublicSettings()
-    communityName = settings.communityName
-  } catch {
-    // silently degrade
-  }
-
-  return (
-    <ForumLayout communityName={communityName}>
-      <div className="mx-auto max-w-2xl space-y-8">
-        <Breadcrumbs items={[{ label: 'Home', href: '/' }, { label: 'Terms of service' }]} />
-
-        <h1 className="text-2xl font-bold text-foreground">Terms of service</h1>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Acceptance of terms</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            By accessing or using Barazo, you agree to be bound by these Terms of Service. If you do
-            not agree to these terms, you may not use the service. Barazo reserves the right to
-            update these terms at any time, with notice provided through the platform.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Eligibility</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            You must be at least 16 years old to use Barazo (in accordance with the Dutch
-            implementation of GDPR, UAVG). By using the service, you confirm that you meet this age
-            requirement. Access to mature content may require additional age verification as
-            required by applicable law.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Account and authentication</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo uses the AT Protocol for authentication. You log in using your existing AT
-            Protocol identity (e.g., a Bluesky account). You are responsible for maintaining the
-            security of your AT Protocol account. Barazo does not store your password.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Content and conduct</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            You retain ownership of content you post on Barazo. By posting, you grant Barazo a
-            license to display, index, and distribute your content as part of the forum service and
-            via the AT Protocol.
-          </p>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            You agree not to post content that:
-          </p>
-          <ul className="list-inside list-disc space-y-2 text-sm text-muted-foreground">
-            <li>Violates applicable laws or regulations.</li>
-            <li>Infringes on the intellectual property rights of others.</li>
-            <li>Contains spam, malware, or deceptive content.</li>
-            <li>Harasses, threatens, or promotes violence against individuals or groups.</li>
-            <li>Contains child sexual abuse material (CSAM).</li>
-          </ul>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Community administrators may enforce additional content policies specific to their
-            community. Repeated violations may result in content removal, account restrictions, or
-            bans.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Content maturity ratings</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Communities and categories may be rated for content maturity (Safe for Work, Mature, or
-            Adult). You are responsible for accurately labeling your content. Communities may
-            require age verification to access mature content. New accounts default to safe-mode
-            with mature content hidden.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Cross-posting</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo may cross-post your content to connected platforms (such as Bluesky or Frontpage)
-            when you enable this feature. Cross-posting is optional and can be controlled in your
-            settings. Cross-posted content is subject to the terms of the destination platform.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Moderation and labels</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Your account may be labeled by independent moderation services (such as Bluesky&apos;s
-            Ozone). Labels affect posting limits and content visibility. You cannot delete labels
-            applied by labeler services, but you can dispute inaccuracies by contacting us or the
-            labeler service. Community administrators may also apply local moderation overrides.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">AI-generated summaries</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo may generate AI-powered summaries of discussion threads. These summaries are
-            anonymized derivative works that do not contain personal data (no usernames or verbatim
-            quotes). AI summaries may persist after individual content is deleted, as they are
-            regenerated from remaining content. Community administrators can disable summary
-            preservation.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">AT Protocol and federation</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo is built on the AT Protocol, which is a federated, open network. Content you post
-            may be indexed by other services on the AT Protocol network. Barazo cannot control how
-            third-party services handle your data once it is published via the protocol.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Termination</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo may suspend or terminate your access if you violate these terms. You may stop
-            using the service at any time. Deleting your AT Protocol account or content will trigger
-            removal of indexed data from Barazo (see our Privacy Policy for details).
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Limitation of liability</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            Barazo is provided &quot;as is&quot; without warranties of any kind. We are not liable
-            for any damages arising from your use of the service, including but not limited to loss
-            of data, service interruptions, or actions taken by community moderators or
-            administrators.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <h2 className="text-lg font-semibold text-foreground">Governing law</h2>
-          <p className="text-sm leading-relaxed text-muted-foreground">
-            These terms are governed by the laws of the Netherlands. Any disputes arising from these
-            terms will be subject to the exclusive jurisdiction of the courts of the Netherlands.
-          </p>
-        </section>
-
-        <section className="space-y-3">
-          <p className="text-xs text-muted-foreground">
-            These terms were last updated on February 2026.
-          </p>
-        </section>
-      </div>
-    </ForumLayout>
-  )
-}
diff --git a/src/app/p/[slug]/not-found.test.tsx b/src/app/p/[slug]/not-found.test.tsx
new file mode 100644
index 0000000..45a06b6
--- /dev/null
+++ b/src/app/p/[slug]/not-found.test.tsx
@@ -0,0 +1,70 @@
+/**
+ * Tests for page not found component.
+ */
+
+import { describe, it, expect, vi } from 'vitest'
+import { render, screen } from '@testing-library/react'
+import { axe } from 'vitest-axe'
+import PageNotFound from './not-found'
+
+vi.mock('next/navigation', () => ({
+  usePathname: () => '/p/nonexistent',
+  useRouter: () => ({ push: vi.fn() }),
+}))
+
+vi.mock('next-themes', () => ({
+  useTheme: () => ({ theme: 'dark', setTheme: vi.fn() }),
+  ThemeProvider: ({ children }: { children: React.ReactNode }) => children,
+}))
+
+vi.mock('next/link', () => ({
+  default: ({
+    children,
+    href,
+    ...props
+  }: { children: React.ReactNode; href: string } & Record<string, unknown>) => (
+    <a href={href} {...props}>
+      {children}
+    </a>
+  ),
+}))
+
+vi.mock('next/image', () => ({
+  default: (props: Record<string, unknown>) => {
+    // eslint-disable-next-line @next/next/no-img-element, jsx-a11y/alt-text
+    return <img {...props} />
+  },
+}))
+
+vi.mock('@/hooks/use-auth', () => ({
+  useAuth: () => ({
+    user: null,
+    isAuthenticated: false,
+    isLoading: false,
+    getAccessToken: () => null,
+    login: vi.fn(),
+    logout: vi.fn(),
+    setSessionFromCallback: vi.fn(),
+    authFetch: vi.fn(),
+  }),
+}))
+
+describe('PageNotFound', () => {
+  it('renders not found heading', () => {
+    render(<PageNotFound />)
+    expect(screen.getByRole('heading', { name: /page not found/i })).toBeInTheDocument()
+  })
+
+  it('renders helpful message', () => {
+    render(<PageNotFound />)
+    expect(
+      screen.getByText(/the page you are looking for does not exist or has been removed/i)
+    ).toBeInTheDocument()
+  })
+
+  it('passes axe accessibility check', async () => {
+    const { container } = render(<PageNotFound />)
+    const results = await axe(container)
+    expect(results).toHaveNoViolations()
+  })
+})
diff --git a/src/app/p/[slug]/not-found.tsx b/src/app/p/[slug]/not-found.tsx
new file mode 100644
index 0000000..87d2089
--- /dev/null
+++ b/src/app/p/[slug]/not-found.tsx
@@ -0,0 +1,19 @@
+/**
+ * 404 page for public pages.
+ * Displayed when a page slug does not match any published page.
+ */
+
+import { ForumLayout } from '@/components/layout/forum-layout'
+
+export default function PageNotFound() {
+  return (
+    <ForumLayout>
+      <div className="py-16 text-center">
+        <h1 className="text-2xl font-bold text-foreground">Page not found</h1>
+        <p className="mt-2 text-muted-foreground">
+          The page you are looking for does not exist or has been removed.
+        </p>
+      </div>
+    </ForumLayout>
+  )
+}
diff --git a/src/app/p/[slug]/page.test.tsx b/src/app/p/[slug]/page.test.tsx
new file mode 100644
index 0000000..0364e17
--- /dev/null
+++ b/src/app/p/[slug]/page.test.tsx
@@ -0,0 +1,114 @@
+/**
+ * Tests for public page rendering.
+ */
+
+import { describe, it, expect, vi } from 'vitest'
+import { render, screen } from '@testing-library/react'
+import { axe } from 'vitest-axe'
+import PublicPage from './page'
+
+vi.mock('next/navigation', () => ({
+  usePathname: () => '/p/about',
+  useRouter: () => ({ push: vi.fn() }),
+  notFound: vi.fn(() => {
+    throw new Error('NEXT_NOT_FOUND')
+  }),
+}))
+
+vi.mock('next-themes', () => ({
+  useTheme: () => ({ theme: 'dark', setTheme: vi.fn() }),
+  ThemeProvider: ({ children }: { children: React.ReactNode }) => children,
+}))
+
+vi.mock('next/link', () => ({
+  default: ({
+    children,
+    href,
+    ...props
+  }: { children: React.ReactNode; href: string } & Record<string, unknown>) => (
+    <a href={href} {...props}>
+      {children}
+    </a>
+  ),
+}))
+
+vi.mock('next/image', () => ({
+  default: (props: Record<string, unknown>) => {
+    // eslint-disable-next-line @next/next/no-img-element, jsx-a11y/alt-text
+    return <img {...props} />
+  },
+}))
+
+vi.mock('@/hooks/use-auth', () => ({
+  useAuth: () => ({
+    user: null,
+    isAuthenticated: false,
+    isLoading: false,
+    getAccessToken: () => null,
+    login: vi.fn(),
+    logout: vi.fn(),
+    setSessionFromCallback: vi.fn(),
+    authFetch: vi.fn(),
+  }),
+}))
+
+describe('PublicPage', () => {
+  it('renders page title as heading', async () => {
+    const page = await PublicPage({
+      params: Promise.resolve({ slug: 'about' }),
+    })
+    render(page)
+    expect(
+      screen.getByRole('heading', { name: /about this community/i, level: 1 })
+    ).toBeInTheDocument()
+  })
+
+  it('renders page content as markdown', async () => {
+    const page = await PublicPage({
+      params: Promise.resolve({ slug: 'about' }),
+    })
+    render(page)
+    // The markdown content "# About\n\nWelcome to our community forum." should render
+    expect(screen.getByText(/welcome to our community forum/i)).toBeInTheDocument()
+  })
+
+  it('renders breadcrumbs with Home and page title', async () => {
+    const page = await PublicPage({
+      params: Promise.resolve({ slug: 'about' }),
+    })
+    render(page)
+    expect(screen.getByText('Home')).toBeInTheDocument()
+  })
+
+  it('renders JSON-LD structured data with absolute URL', async () => {
+    const page = await PublicPage({
+      params: Promise.resolve({ slug: 'about' }),
+    })
+    const { container } = render(page)
+    const jsonLdScript = container.querySelector('script[type="application/ld+json"]')
+    expect(jsonLdScript).not.toBeNull()
+    const jsonLd = JSON.parse(jsonLdScript!.textContent ?? '{}')
+    expect(jsonLd['@type']).toBe('WebPage')
+    expect(jsonLd.name).toBe('About This Community')
+    expect(jsonLd.url).toBe('https://barazo.forum/p/about')
+  })
+
+  it('calls notFound for non-existent page', async () => {
+    const { notFound } = await import('next/navigation')
+    await expect(
+      PublicPage({
+        params: Promise.resolve({ slug: 'nonexistent' }),
+      })
+    ).rejects.toThrow('NEXT_NOT_FOUND')
+    expect(notFound).toHaveBeenCalled()
+  })
+
+  it('passes axe accessibility check', async () => {
+    const page = await PublicPage({
+      params: Promise.resolve({ slug: 'about' }),
+    })
+    const { container } = render(page)
+    const results = await axe(container)
+    expect(results).toHaveNoViolations()
+  })
+})
diff --git a/src/app/p/[slug]/page.tsx b/src/app/p/[slug]/page.tsx
new file mode 100644
index 0000000..546b6ab
--- /dev/null
+++ b/src/app/p/[slug]/page.tsx
@@ -0,0 +1,95 @@
+/**
+ * Public page rendering - Displays admin-created static pages.
+ * URL: /p/{slug}
+ * Server-side rendered with JSON-LD WebPage and OpenGraph metadata.
+ */
+
+import type { Metadata } from 'next'
+import { notFound } from 'next/navigation'
+import { getPageBySlug, getPublicSettings, ApiError } from '@/lib/api/client'
+import { ForumLayout } from '@/components/layout/forum-layout'
+import { Breadcrumbs } from '@/components/breadcrumbs'
+import { MarkdownContent } from '@/components/markdown-content'
+
+export const dynamic = 'force-dynamic'
+
+const SITE_URL = process.env.NEXT_PUBLIC_SITE_URL ?? 'https://barazo.forum'
+
+/** Truncate content to a max length suitable for meta descriptions. */
+function truncateDescription(text: string, maxLength = 157): string {
+  return text.length > maxLength ? text.slice(0, maxLength) + '...' : text
+}
+
+interface PublicPageProps {
+  params: Promise<{ slug: string }>
+}
+
+export async function generateMetadata({ params }: PublicPageProps): Promise<Metadata> {
+  const { slug } = await params
+  try {
+    const page = await getPageBySlug(slug)
+    const description = page.metaDescription ?? truncateDescription(page.content)
+
+    return {
+      title: page.title,
+      description,
+      alternates: {
+        canonical: `/p/${slug}`,
+      },
+      openGraph: {
+        title: page.title,
+        description,
+        type: 'website',
+      },
+    }
+  } catch {
+    return { title: 'Page Not Found' }
+  }
+}
+
+export default async function PublicPage({ params }: PublicPageProps) {
+  const { slug } = await params
+
+  let page
+  try {
+    page = await getPageBySlug(slug)
+  } catch (error) {
+    if (error instanceof ApiError && error.status === 404) {
+      notFound()
+    }
+    throw error
+  }
+
+  let communityName = ''
+  try {
+    const settings = await getPublicSettings()
+    communityName = settings.communityName
+  } catch {
+    // silently degrade
+  }
+
+  const jsonLd = {
+    '@context': 'https://schema.org',
+    '@type': 'WebPage',
+    name: page.title,
+    description: page.metaDescription ?? truncateDescription(page.content),
+    dateModified: page.updatedAt,
+    url: `${SITE_URL}/p/${slug}`,
+  }
+
+  return (
+    <ForumLayout communityName={communityName}>
+      <script
+        type="application/ld+json"
+        dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLd) }}
+      />
+
+      <Breadcrumbs items={[{ label: 'Home', href: '/' }, { label: page.title }]} />
+
+      <div className="mx-auto max-w-2xl space-y-6">
+        <h1 className="text-2xl font-bold text-foreground">{page.title}</h1>
+        <MarkdownContent content={page.content} />
+      </div>
+    </ForumLayout>
+  )
+}
diff --git a/src/components/admin/admin-layout.tsx b/src/components/admin/admin-layout.tsx
index 8828cb9..8b8d7ec 100644
--- a/src/components/admin/admin-layout.tsx
+++ b/src/components/admin/admin-layout.tsx
@@ -9,6 +9,7 @@
 import Link from 'next/link'
 import { usePathname } from 'next/navigation'
 import {
+  Article,
   ChartBar,
   FolderSimple,
   ShieldCheck,
@@ -31,6 +32,7 @@ interface AdminLayoutProps {
 const NAV_ITEMS = [
   { href: '/admin', label: 'Dashboard', icon: ChartBar },
   { href: '/admin/categories', label: 'Categories', icon: FolderSimple },
+  { href: '/admin/pages', label: 'Pages', icon: Article },
   { href: '/admin/moderation', label: 'Moderation', icon: ShieldCheck },
   { href: '/admin/sybil-detection', label: 'Sybil Detection', icon: ShieldWarning },
   { href: '/admin/trust-seeds', label: 'Trust Seeds', icon: SealCheck },
diff --git a/src/components/admin/pages/page-form.test.tsx b/src/components/admin/pages/page-form.test.tsx
new file mode 100644
index 0000000..c17e64e
--- /dev/null
+++ b/src/components/admin/pages/page-form.test.tsx
@@ -0,0 +1,192 @@
+/**
+ * Tests for PageForm component.
+ */
+
+import { describe, it, expect, vi } from 'vitest'
+import { render, screen } from '@testing-library/react'
+import userEvent from '@testing-library/user-event'
+import { axe } from 'vitest-axe'
+import { PageForm } from './page-form'
+import type { PageFormProps } from './page-form'
+import type { PageTreeNode } from '@/lib/api/types'
+
+const mockParents: PageTreeNode[] = [
+  {
+    id: 'page-about',
+    slug: 'about',
+    title: 'About This Community',
+    content: '# About',
+    status: 'published',
+    metaDescription: 'About page',
+    parentId: null,
+    sortOrder: 0,
+    communityDid: 'did:plc:test-community-123',
+    createdAt: '2026-01-01T00:00:00Z',
+    updatedAt: '2026-01-01T00:00:00Z',
+    children: [],
+  },
+  {
+    id: 'page-privacy',
+    slug: 'privacy-policy',
+    title: 'Privacy Policy',
+    content: '# Privacy',
+    status: 'published',
+    metaDescription: 'Privacy page',
+    parentId: null,
+    sortOrder: 1,
+    communityDid: 'did:plc:test-community-123',
+    createdAt: '2026-01-01T00:00:00Z',
+    updatedAt: '2026-01-01T00:00:00Z',
+    children: [],
+  },
+]
+
+function renderPageForm(overrides: Partial<PageFormProps> = {}) {
+  const defaultProps: PageFormProps = {
+    title: '',
+    slug: '',
+    content: '',
+    status: 'draft',
+    parentId: null,
+    metaDescription: '',
+    isEditMode: false,
+    availableParents: mockParents,
+    onTitleChange: vi.fn(),
+    onSlugChange: vi.fn(),
+    onContentChange: vi.fn(),
+    onStatusChange: vi.fn(),
+    onParentIdChange: vi.fn(),
+    onMetaDescriptionChange: vi.fn(),
+    onSave: vi.fn(),
+    onCancel: vi.fn(),
+    saving: false,
+    ...overrides,
+  }
+  return { ...render(<PageForm {...defaultProps} />), props: defaultProps }
+}
+
+describe('PageForm', () => {
+  it('renders title input', () => {
+    renderPageForm()
+    expect(screen.getByLabelText(/title/i)).toBeInTheDocument()
+  })
+
+  it('renders slug input', () => {
+    renderPageForm()
+    expect(screen.getByLabelText(/slug/i)).toBeInTheDocument()
+  })
+
+  it('renders status select with draft and published options', () => {
+    renderPageForm()
+    const select = screen.getByLabelText(/status/i)
+    expect(select).toBeInTheDocument()
+    expect(screen.getByRole('option', { name: 'Draft' })).toBeInTheDocument()
+    expect(screen.getByRole('option', { name: 'Published' })).toBeInTheDocument()
+  })
+
+  it('renders parent page select with available parents', () => {
+    renderPageForm()
+    const select = screen.getByLabelText(/parent page/i)
+    expect(select).toBeInTheDocument()
+    expect(screen.getByRole('option', { name: 'None (top-level)' })).toBeInTheDocument()
+    expect(screen.getByRole('option', { name: 'About This Community' })).toBeInTheDocument()
+    expect(screen.getByRole('option', { name: 'Privacy Policy' })).toBeInTheDocument()
+  })
+
+  it('renders meta description textarea with character count', () => {
+    renderPageForm({ metaDescription: 'Test description' })
+    expect(screen.getByLabelText(/meta description/i)).toBeInTheDocument()
+    expect(screen.getByText('16/320')).toBeInTheDocument()
+  })
+
+  it('renders save and cancel buttons', () => {
+    renderPageForm()
+    expect(screen.getByRole('button', { name: /save/i })).toBeInTheDocument()
+    expect(screen.getByRole('button', { name: /cancel/i })).toBeInTheDocument()
+  })
+
+  it('shows "Saving..." text when saving is true', () => {
+    renderPageForm({ saving: true })
+    expect(screen.getByRole('button', { name: /saving/i })).toBeDisabled()
+  })
+
+  it('does not render delete button in create mode', () => {
+    renderPageForm({ isEditMode: false })
+    expect(screen.queryByRole('button', { name: /delete/i })).not.toBeInTheDocument()
+  })
+
+  it('renders delete button in edit mode', () => {
+    renderPageForm({ isEditMode: true, onDelete: vi.fn() })
+    expect(screen.getByRole('button', { name: /delete/i })).toBeInTheDocument()
+  })
+
+  it('calls onTitleChange when title is typed', async () => {
+    const onTitleChange = vi.fn()
+    const user = userEvent.setup()
+    renderPageForm({ onTitleChange })
+    await user.type(screen.getByLabelText(/title/i), 'H')
+    expect(onTitleChange).toHaveBeenCalledWith('H')
+  })
+
+  it('calls onSlugChange when slug is typed', async () => {
+    const onSlugChange = vi.fn()
+    const user = userEvent.setup()
+    renderPageForm({ onSlugChange })
+    await user.type(screen.getByLabelText(/slug/i), 'h')
+    expect(onSlugChange).toHaveBeenCalledWith('h')
+  })
+
+  it('calls onSave when save button is clicked', async () => {
+    const onSave = vi.fn()
+    const user = userEvent.setup()
+    renderPageForm({ onSave })
+    await user.click(screen.getByRole('button', { name: /save/i }))
+    expect(onSave).toHaveBeenCalledOnce()
+  })
+
+  it('calls onCancel when cancel button is clicked', async () => {
+    const onCancel = vi.fn()
+    const user = userEvent.setup()
+    renderPageForm({ onCancel })
+    await user.click(screen.getByRole('button', { name: /cancel/i }))
+    expect(onCancel).toHaveBeenCalledOnce()
+  })
+
+  it('calls onDelete when delete button is clicked', async () => {
+    const onDelete = vi.fn()
+    const user = userEvent.setup()
+    renderPageForm({ isEditMode: true, onDelete })
+    await user.click(screen.getByRole('button', { name: /delete/i }))
+    expect(onDelete).toHaveBeenCalledOnce()
+  })
+
+  it('calls onStatusChange when status is changed', async () => {
+    const onStatusChange = vi.fn()
+    const user = userEvent.setup()
+    renderPageForm({ onStatusChange })
+    await user.selectOptions(screen.getByLabelText(/status/i), 'published')
+    expect(onStatusChange).toHaveBeenCalledWith('published')
+  })
+
+  it('calls onParentIdChange when parent is changed', async () => {
+    const onParentIdChange = vi.fn()
+    const user = userEvent.setup()
+    renderPageForm({ onParentIdChange })
+    await user.selectOptions(screen.getByLabelText(/parent page/i), 'page-about')
+    expect(onParentIdChange).toHaveBeenCalledWith('page-about')
+  })
+
+  it('calls onParentIdChange with null when "None" is selected', async () => {
+    const onParentIdChange = vi.fn()
+    const user = userEvent.setup()
+    renderPageForm({ onParentIdChange, parentId: 'page-about' })
+    await user.selectOptions(screen.getByLabelText(/parent page/i), '')
+    expect(onParentIdChange).toHaveBeenCalledWith(null)
+  })
+
+  it('passes axe accessibility check', async () => {
+    const { container } = renderPageForm()
+    const results = await axe(container)
+    expect(results).toHaveNoViolations()
+  })
+})
diff --git a/src/components/admin/pages/page-form.tsx b/src/components/admin/pages/page-form.tsx
new file mode 100644
index 0000000..5faf0d6
--- /dev/null
+++ b/src/components/admin/pages/page-form.tsx
@@ -0,0 +1,166 @@
+/**
+ * PageForm - Edit/create form for a static page.
+ * Extracted from the admin page editor to keep components under ~150 lines.
+ * @see specs/prd-web.md Section M12
+ */
+
+import { TopicContentEditor } from '@/components/topic-content-editor'
+import type { PageStatus, PageTreeNode } from '@/lib/api/types'
+
+export interface PageFormProps {
+  title: string
+  slug: string
+  content: string
+  status: PageStatus
+  parentId: string | null
+  metaDescription: string
+  isEditMode: boolean
+  availableParents: PageTreeNode[]
+  onTitleChange: (title: string) => void
+  onSlugChange: (slug: string) => void
+  onContentChange: (content: string) => void
+  onStatusChange: (status: PageStatus) => void
+  onParentIdChange: (parentId: string | null) => void
+  onMetaDescriptionChange: (metaDescription: string) => void
+  onSave: () => void
+  onCancel: () => void
+  onDelete?: () => void
+  saving: boolean
+}
+
+export function PageForm({
+  title,
+  slug,
+  content,
+  status,
+  parentId,
+  metaDescription,
+  isEditMode,
+  availableParents,
+  onTitleChange,
+  onSlugChange,
+  onContentChange,
+  onStatusChange,
+  onParentIdChange,
+  onMetaDescriptionChange,
+  onSave,
+  onCancel,
+  onDelete,
+  saving,
+}: PageFormProps) {
+  return (
+    <>
+      <div className="space-y-4">
+        <div>
+          <label htmlFor="page-title" className="block text-sm font-medium text-foreground">
+            Title
+          </label>
+          <input
+            id="page-title"
+            type="text"
+            value={title}
+            onChange={(e) => onTitleChange(e.target.value)}
+            className="mt-1 block w-full rounded-md border border-border bg-background px-3 py-2 text-sm text-foreground placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+            placeholder="Page title"
+          />
+        </div>
+
+        <div>
+          <label htmlFor="page-slug" className="block text-sm font-medium text-foreground">
+            Slug
+          </label>
+          <input
+            id="page-slug"
+            type="text"
+            value={slug}
+            onChange={(e) => onSlugChange(e.target.value)}
+            className="mt-1 block w-full rounded-md border border-border bg-background px-3 py-2 text-sm text-foreground placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+            placeholder="url-slug"
+          />
+        </div>
+
+        <div>
+          <label htmlFor="page-status" className="block text-sm font-medium text-foreground">
+            Status
+          </label>
+          <select
+            id="page-status"
+            value={status}
+            onChange={(e) => onStatusChange(e.target.value as PageStatus)}
+            className="mt-1 block w-full rounded-md border border-border bg-background px-3 py-2 text-sm text-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+          >
+            <option value="draft">Draft</option>
+            <option value="published">Published</option>
+          </select>
+        </div>
+
+        <div>
+          <label htmlFor="page-parent" className="block text-sm font-medium text-foreground">
+            Parent Page
+          </label>
+          <select
+            id="page-parent"
+            value={parentId ?? ''}
+            onChange={(e) => onParentIdChange(e.target.value || null)}
+            className="mt-1 block w-full rounded-md border border-border bg-background px-3 py-2 text-sm text-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+          >
+            <option value="">None (top-level)</option>
+            {availableParents.map((p) => (
+              <option key={p.id} value={p.id}>
+                {p.title}
+              </option>
+            ))}
+          </select>
+        </div>
+
+        <div>
+          <label
+            htmlFor="page-meta-description"
+            className="block text-sm font-medium text-foreground"
+          >
+            Meta Description
+          </label>
+          <textarea
+            id="page-meta-description"
+            value={metaDescription}
+            onChange={(e) => onMetaDescriptionChange(e.target.value)}
+            maxLength={320}
+            rows={2}
+            className="mt-1 block w-full rounded-md border border-border bg-background px-3 py-2 text-sm text-foreground placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+            placeholder="Brief description for search engines"
+          />
+          <p className="mt-1 text-xs text-muted-foreground">{metaDescription.length}/320</p>
+        </div>
+
+        <TopicContentEditor content={content} onChange={onContentChange} />
+      </div>
+
+      <div className="flex items-center gap-3">
+        <button
+          type="button"
+          onClick={onSave}
+          disabled={saving}
+          className="rounded-md bg-primary px-4 py-2 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90 disabled:opacity-50"
+        >
+          {saving ? 'Saving...' : 'Save'}
+        </button>
+        <button
+          type="button"
+          onClick={onCancel}
+          className="rounded-md border border-border px-4 py-2 text-sm font-medium text-foreground transition-colors hover:bg-muted"
+        >
+          Cancel
+        </button>
+        {isEditMode && onDelete && (
+          <button
+            type="button"
+            onClick={onDelete}
+            className="ml-auto rounded-md border border-destructive/30 px-4 py-2 text-sm font-medium text-destructive transition-colors hover:bg-destructive/10"
+          >
+            Delete
+          </button>
+        )}
+      </div>
+    </>
+  )
+}
diff --git a/src/components/admin/pages/page-row.test.tsx b/src/components/admin/pages/page-row.test.tsx
new file mode 100644
index 0000000..110021f
--- /dev/null
+++ b/src/components/admin/pages/page-row.test.tsx
@@ -0,0 +1,119 @@
+/**
+ * Tests for PageRow component.
+ */
+
+import { describe, it, expect, vi } from 'vitest'
+import { render, screen } from '@testing-library/react'
+import userEvent from '@testing-library/user-event'
+import { axe } from 'vitest-axe'
+import { PageRow } from './page-row'
+import type { PageTreeNode } from '@/lib/api/types'
+
+vi.mock('next/link', () => ({
+  default: ({
+    children,
+    href,
+    ...props
+  }: { children: React.ReactNode; href: string } & Record<string, unknown>) => (
+    <a href={href} {...props}>
+      {children}
+    </a>
+  ),
+}))
+
+const mockPage: PageTreeNode = {
+  id: 'page-about',
+  slug: 'about',
+  title: 'About This Community',
+  content: '# About\n\nWelcome.',
+  status: 'published',
+  metaDescription: 'About page description.',
+  parentId: null,
+  sortOrder: 0,
+  communityDid: 'did:plc:test-community-123',
+  createdAt: '2026-02-12T12:00:00.000Z',
+  updatedAt: '2026-02-13T12:00:00.000Z',
+  children: [],
+}
+
+const mockDraftPage: PageTreeNode = {
+  ...mockPage,
+  id: 'page-draft',
+  slug: 'draft-page',
+  title: 'Draft Page',
+  status: 'draft',
+  children: [],
+}
+
+describe('PageRow', () => {
+  it('renders page title', () => {
+    render(<PageRow page={mockPage} depth={0} onDelete={vi.fn()} />)
+    expect(screen.getByText('About This Community')).toBeInTheDocument()
+  })
+
+  it('renders slug in muted text', () => {
+    render(<PageRow page={mockPage} depth={0} onDelete={vi.fn()} />)
+    expect(screen.getByText('/p/about')).toBeInTheDocument()
+  })
+
+  it('renders Published status badge for published page', () => {
+    render(<PageRow page={mockPage} depth={0} onDelete={vi.fn()} />)
+    expect(screen.getByText('Published')).toBeInTheDocument()
+  })
+
+  it('renders Draft status badge for draft page', () => {
+    render(<PageRow page={mockDraftPage} depth={0} onDelete={vi.fn()} />)
+    expect(screen.getByText('Draft')).toBeInTheDocument()
+  })
+
+  it('renders edit link to admin page editor', () => {
+    render(<PageRow page={mockPage} depth={0} onDelete={vi.fn()} />)
+    const editLink = screen.getByRole('link', { name: /edit about this community/i })
+    expect(editLink).toHaveAttribute('href', '/admin/pages/page-about')
+  })
+
+  it('renders delete button', () => {
+    render(<PageRow page={mockPage} depth={0} onDelete={vi.fn()} />)
+    expect(screen.getByRole('button', { name: /delete about this community/i })).toBeInTheDocument()
+  })
+
+  it('calls onDelete when delete button is clicked', async () => {
+    const user = userEvent.setup()
+    const onDelete = vi.fn()
+    render(<PageRow page={mockPage} depth={0} onDelete={onDelete} />)
+    await user.click(screen.getByRole('button', { name: /delete about this community/i }))
+    expect(onDelete).toHaveBeenCalledWith('page-about')
+  })
+
+  it('indents children with increased depth', () => {
+    render(<PageRow page={mockPage} depth={1} onDelete={vi.fn()} />)
+    const container = screen.getByText('About This Community').closest('[data-depth]')
+    expect(container).toHaveAttribute('data-depth', '1')
+  })
+
+  it('renders children recursively', () => {
+    const parentPage: PageTreeNode = {
+      ...mockPage,
+      id: 'page-parent',
+      title: 'Parent Page',
+      children: [
+        {
+          ...mockPage,
+          id: 'page-child',
+          title: 'Child Page',
+          parentId: 'page-parent',
+          children: [],
+        },
+      ],
+    }
+    render(<PageRow page={parentPage} depth={0} onDelete={vi.fn()} />)
+    expect(screen.getByText('Parent Page')).toBeInTheDocument()
+    expect(screen.getByText('Child Page')).toBeInTheDocument()
+  })
+
+  it('passes axe accessibility check', async () => {
+    const { container } = render(<PageRow page={mockPage} depth={0} onDelete={vi.fn()} />)
+    const results = await axe(container)
+    expect(results).toHaveNoViolations()
+  })
+})
diff --git a/src/components/admin/pages/page-row.tsx b/src/components/admin/pages/page-row.tsx
new file mode 100644
index 0000000..d95e95e
--- /dev/null
+++ b/src/components/admin/pages/page-row.tsx
@@ -0,0 +1,74 @@
+/**
+ * PageRow - Recursive tree row for a single page with edit/delete controls.
+ * Follows CategoryRow pattern for consistency.
+ */
+
+import Link from 'next/link'
+import { PencilSimple, TrashSimple } from '@phosphor-icons/react'
+import { cn } from '@/lib/utils'
+import type { PageTreeNode, PageStatus } from '@/lib/api/types'
+
+const STATUS_LABELS: Record<PageStatus, string> = {
+  draft: 'Draft',
+  published: 'Published',
+}
+
+const STATUS_COLORS: Record<PageStatus, string> = {
+  draft: 'bg-yellow-100 text-yellow-800 dark:bg-yellow-900/30 dark:text-yellow-400',
+  published: 'bg-green-100 text-green-800 dark:bg-green-900/30 dark:text-green-400',
+}
+
+interface PageRowProps {
+  page: PageTreeNode
+  depth: number
+  onDelete: (id: string) => void
+}
+
+export function PageRow({ page, depth, onDelete }: PageRowProps) {
+  return (
+    <>
+      <div
+        data-depth={depth}
+        className={cn(
+          'flex items-center justify-between rounded-md border border-border bg-card p-3',
+          depth > 0 && 'ml-6'
+        )}
+      >
+        <div className="flex items-center gap-3">
+          <div>
+            <p className="text-sm font-medium text-foreground">{page.title}</p>
+            <p className="text-xs text-muted-foreground">/p/{page.slug}</p>
+          </div>
+        </div>
+        <div className="flex items-center gap-2">
+          <span
+            className={cn(
+              'rounded-full px-2 py-0.5 text-xs font-medium',
+              STATUS_COLORS[page.status]
+            )}
+          >
+            {STATUS_LABELS[page.status]}
+          </span>
+          <Link
+            href={`/admin/pages/${page.id}`}
+            className="rounded-md p-1.5 text-muted-foreground transition-colors hover:bg-muted hover:text-foreground"
+            aria-label={`Edit ${page.title}`}
+          >
+            <PencilSimple size={16} aria-hidden="true" />
+          </Link>
+          <button
+            type="button"
+            onClick={() => onDelete(page.id)}
+            className="rounded-md p-1.5 text-muted-foreground transition-colors hover:bg-destructive/10 hover:text-destructive"
+            aria-label={`Delete ${page.title}`}
+          >
+            <TrashSimple size={16} aria-hidden="true" />
+          </button>
+        </div>
+      </div>
+      {page.children.map((child) => (
+        <PageRow key={child.id} page={child} depth={depth + 1} onDelete={onDelete} />
+      ))}
+    </>
+  )
+}
diff --git a/src/components/admin/pages/slug-generator.test.ts b/src/components/admin/pages/slug-generator.test.ts
new file mode 100644
index 0000000..574cc45
--- /dev/null
+++ b/src/components/admin/pages/slug-generator.test.ts
@@ -0,0 +1,41 @@
+/**
+ * Tests for slug generator utility.
+ */
+
+import { describe, it, expect } from 'vitest'
+import { generateSlug } from './slug-generator'
+
+describe('generateSlug', () => {
+  it('converts title to lowercase slug', () => {
+    expect(generateSlug('Hello World')).toBe('hello-world')
+  })
+
+  it('replaces non-alphanumeric characters with hyphens', () => {
+    expect(generateSlug('Privacy & Terms!')).toBe('privacy-terms')
+  })
+
+  it('collapses multiple hyphens into one', () => {
+    expect(generateSlug('Hello   World --- Test')).toBe('hello-world-test')
+  })
+
+  it('trims leading and trailing hyphens', () => {
+    expect(generateSlug('---Hello World---')).toBe('hello-world')
+  })
+
+  it('truncates to 100 characters', () => {
+    const longTitle = 'a'.repeat(150)
+    expect(generateSlug(longTitle).length).toBe(100)
+  })
+
+  it('handles empty string', () => {
+    expect(generateSlug('')).toBe('')
+  })
+
+  it('handles special characters', () => {
+    expect(generateSlug("What's New? (2026)")).toBe('what-s-new-2026')
+  })
+
+  it('handles numbers', () => {
+    expect(generateSlug('Version 2.0 Release')).toBe('version-2-0-release')
+  })
+})
diff --git a/src/components/admin/pages/slug-generator.ts b/src/components/admin/pages/slug-generator.ts
new file mode 100644
index 0000000..001d33d
--- /dev/null
+++ b/src/components/admin/pages/slug-generator.ts
@@ -0,0 +1,11 @@
+/**
+ * Generate a URL-safe slug from a title string.
+ * Lowercase, replace non-alphanumeric with hyphens, trim edges, max 100 chars.
+ */
+export function generateSlug(title: string): string {
+  return title
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .slice(0, 100)
+}
diff --git a/src/components/layout/forum-layout.test.tsx b/src/components/layout/forum-layout.test.tsx
index b4720a3..271d5d8 100644
--- a/src/components/layout/forum-layout.test.tsx
+++ b/src/components/layout/forum-layout.test.tsx
@@ -111,6 +111,24 @@ describe('ForumLayout', () => {
     expect(logos.length).toBeGreaterThan(0)
   })
 
+  it('links footer privacy to /p/privacy-policy', () => {
+    render(<ForumLayout>Content</ForumLayout>)
+    const privacyLink = screen.getByRole('link', { name: /privacy/i })
+    expect(privacyLink).toHaveAttribute('href', '/p/privacy-policy')
+  })
+
+  it('links footer terms to /p/terms-of-service', () => {
+    render(<ForumLayout>Content</ForumLayout>)
+    const termsLink = screen.getByRole('link', { name: /terms/i })
+    expect(termsLink).toHaveAttribute('href', '/p/terms-of-service')
+  })
+
+  it('links footer cookies to /p/cookie-policy', () => {
+    render(<ForumLayout>Content</ForumLayout>)
+    const cookiesLink = screen.getByRole('link', { name: /cookies/i })
+    expect(cookiesLink).toHaveAttribute('href', '/p/cookie-policy')
+  })
+
   it('passes axe accessibility check', async () => {
     const { container } = render(
       <ForumLayout>
diff --git a/src/components/layout/forum-layout.tsx b/src/components/layout/forum-layout.tsx
index eb0dac4..c6142c5 100644
--- a/src/components/layout/forum-layout.tsx
+++ b/src/components/layout/forum-layout.tsx
@@ -114,17 +114,20 @@ export function ForumLayout({ children, sidebar, communityName = '' }: ForumLayo
                 </Link>
               </li>
               <li>
-                <Link href="/legal/privacy" className="transition-colors hover:text-foreground">
+                <Link href="/p/privacy-policy" className="transition-colors hover:text-foreground">
                   Privacy
                 </Link>
               </li>
               <li>
-                <Link href="/legal/terms" className="transition-colors hover:text-foreground">
+                <Link
+                  href="/p/terms-of-service"
+                  className="transition-colors hover:text-foreground"
+                >
                   Terms
                 </Link>
               </li>
               <li>
-                <Link href="/legal/cookies" className="transition-colors hover:text-foreground">
+                <Link href="/p/cookie-policy" className="transition-colors hover:text-foreground">
                   Cookies
                 </Link>
               </li>
diff --git a/src/lib/api/client.ts b/src/lib/api/client.ts
index b1a59dc..e895f94 100644
--- a/src/lib/api/client.ts
+++ b/src/lib/api/client.ts
@@ -16,14 +16,18 @@ import type {
   CommunitySettings,
   CommunityStats,
   CommunityPreferenceOverride,
+  CreatePageInput,
   CreateTopicInput,
   InitializeCommunityInput,
   InitializeResponse,
+  Page,
+  PagesResponse,
   PublicSettings,
   SetupStatus,
   Topic,
   TopicsResponse,
   UpdateCommunityPreferenceInput,
+  UpdatePageInput,
   UpdatePreferencesInput,
   UpdateTopicInput,
   UserPreferences,
@@ -1243,4 +1247,69 @@ export function getReactions(
   return apiFetch<ReactionsResponse>(`/api/reactions${query}`, options)
 }
 
+// --- Page endpoints (public) ---
+
+export function getPages(options?: FetchOptions): Promise<PagesResponse> {
+  return apiFetch<PagesResponse>('/api/pages', options)
+}
+
+export function getPageBySlug(slug: string, options?: FetchOptions): Promise<Page> {
+  return apiFetch<Page>(`/api/pages/${encodeURIComponent(slug)}`, options)
+}
+
+// --- Admin page endpoints ---
+
+export function getAdminPages(accessToken: string, options?: FetchOptions): Promise<PagesResponse> {
+  return apiFetch<PagesResponse>('/api/admin/pages', {
+    ...options,
+    headers: { ...options?.headers, Authorization: `Bearer ${accessToken}` },
+  })
+}
+
+export function getAdminPage(
+  id: string,
+  accessToken: string,
+  options?: FetchOptions
+): Promise<Page> {
+  return apiFetch<Page>(`/api/admin/pages/${encodeURIComponent(id)}`, {
+    ...options,
+    headers: { ...options?.headers, Authorization: `Bearer ${accessToken}` },
+  })
+}
+
+export function createPage(
+  input: CreatePageInput,
+  accessToken: string,
+  options?: FetchOptions
+): Promise<Page> {
+  return apiFetch<Page>('/api/admin/pages', {
+    ...options,
+    method: 'POST',
+    headers: { ...options?.headers, Authorization: `Bearer ${accessToken}` },
+    body: input,
+  })
+}
+
+export function updatePage(
+  id: string,
+  input: UpdatePageInput,
+  accessToken: string,
+  options?: FetchOptions
+): Promise<Page> {
+  return apiFetch<Page>(`/api/admin/pages/${encodeURIComponent(id)}`, {
+    ...options,
+    method: 'PUT',
+    headers: { ...options?.headers, Authorization: `Bearer ${accessToken}` },
+    body: input,
+  })
+}
+
+export function deletePage(id: string, accessToken: string, options?: FetchOptions): Promise<void> {
+  return apiFetch<void>(`/api/admin/pages/${encodeURIComponent(id)}`, {
+    ...options,
+    method: 'DELETE',
+    headers: { ...options?.headers, Authorization: `Bearer ${accessToken}` },
+  })
+}
+
 export { ApiError }
diff --git a/src/lib/api/types.ts b/src/lib/api/types.ts
index 7a20299..573ec1e 100644
--- a/src/lib/api/types.ts
+++ b/src/lib/api/types.ts
@@ -49,6 +49,52 @@ export interface CategoriesResponse {
   categories: CategoryTreeNode[]
 }
 
+// --- Pages ---
+
+export type PageStatus = 'draft' | 'published'
+
+export interface Page {
+  id: string
+  slug: string
+  title: string
+  content: string
+  status: PageStatus
+  metaDescription: string | null
+  parentId: string | null
+  sortOrder: number
+  communityDid: string
+  createdAt: string
+  updatedAt: string
+}
+
+export interface PageTreeNode extends Page {
+  children: PageTreeNode[]
+}
+
+export interface PagesResponse {
+  pages: PageTreeNode[]
+}
+
+export interface CreatePageInput {
+  title: string
+  slug: string
+  content?: string
+  status?: PageStatus
+  metaDescription?: string | null
+  parentId?: string | null
+  sortOrder?: number
+}
+
+export interface UpdatePageInput {
+  title?: string
+  slug?: string
+  content?: string
+  status?: PageStatus
+  metaDescription?: string | null
+  parentId?: string | null
+  sortOrder?: number
+}
+
 // --- Author Profile (enriched by AppView) ---
 
 export interface AuthorProfile {
diff --git a/src/mocks/data.ts b/src/mocks/data.ts
index 267672c..03bc6c3 100644
--- a/src/mocks/data.ts
+++ b/src/mocks/data.ts
@@ -28,6 +28,7 @@ import type {
   UserProfile,
   OnboardingField,
   MyReport,
+  PageTreeNode,
   SybilCluster,
   SybilClusterDetail,
   TrustSeed,
@@ -1218,6 +1219,81 @@ export const mockCommunityProfile: CommunityProfile = {
   },
 }
 
+// --- Pages ---
+
+export const mockPages: PageTreeNode[] = [
+  {
+    id: 'page-about',
+    slug: 'about',
+    title: 'About This Community',
+    content: '# About\n\nWelcome to our community forum.',
+    status: 'published',
+    metaDescription: 'Learn about our community forum.',
+    parentId: null,
+    sortOrder: 0,
+    communityDid: COMMUNITY_DID,
+    createdAt: TWO_DAYS_AGO,
+    updatedAt: YESTERDAY,
+    children: [],
+  },
+  {
+    id: 'page-privacy',
+    slug: 'privacy-policy',
+    title: 'Privacy Policy',
+    content: '# Privacy Policy\n\nYour privacy matters to us.',
+    status: 'published',
+    metaDescription: 'How we handle your data.',
+    parentId: null,
+    sortOrder: 1,
+    communityDid: COMMUNITY_DID,
+    createdAt: TWO_DAYS_AGO,
+    updatedAt: TWO_DAYS_AGO,
+    children: [],
+  },
+  {
+    id: 'page-terms',
+    slug: 'terms-of-service',
+    title: 'Terms of Service',
+    content: '# Terms of Service\n\nBy using this forum, you agree to these terms.',
+    status: 'published',
+    metaDescription: 'Terms and conditions for using this forum.',
+    parentId: null,
+    sortOrder: 2,
+    communityDid: COMMUNITY_DID,
+    createdAt: TWO_DAYS_AGO,
+    updatedAt: TWO_DAYS_AGO,
+    children: [],
+  },
+  {
+    id: 'page-cookie',
+    slug: 'cookie-policy',
+    title: 'Cookie Policy',
+    content: '## Overview\n\nBarazo uses a minimal number of cookies...',
+    status: 'published',
+    metaDescription: 'How Barazo uses cookies.',
+    parentId: null,
+    sortOrder: 3,
+    communityDid: COMMUNITY_DID,
+    createdAt: TWO_DAYS_AGO,
+    updatedAt: TWO_DAYS_AGO,
+    children: [],
+  },
+  {
+    id: 'page-draft',
+    slug: 'upcoming-features',
+    title: 'Upcoming Features',
+    content: '# Coming Soon\n\nStay tuned for new features.',
+    status: 'draft',
+    metaDescription: null,
+    parentId: null,
+    sortOrder: 4,
+    communityDid: COMMUNITY_DID,
+    createdAt: YESTERDAY,
+    updatedAt: YESTERDAY,
+    children: [],
+  },
+]
+
 // --- Sybil Detection ---
 
 const TWO_HOURS_AGO = '2026-02-14T10:00:00.000Z'
diff --git a/src/mocks/handlers.ts b/src/mocks/handlers.ts
index 9b5cbcd..920b216 100644
--- a/src/mocks/handlers.ts
+++ b/src/mocks/handlers.ts
@@ -29,6 +29,7 @@ import {
   mockUserProfiles,
   mockPublicSettings,
   mockCommunityProfile,
+  mockPages,
   mockSybilClusters,
   mockSybilClusterDetail,
   mockTrustSeeds,
@@ -829,6 +830,127 @@ export const handlers = [
     })
   }),
 
+  // --- Page endpoints (public) ---
+
+  // GET /api/pages
+  http.get(`${API_URL}/api/pages`, () => {
+    const published = mockPages.filter((p) => p.status === 'published')
+    return HttpResponse.json({ pages: published })
+  }),
+
+  // GET /api/pages/:slug
+  http.get(`${API_URL}/api/pages/:slug`, ({ params }) => {
+    const slug = params['slug'] as string
+    const findPage = (nodes: typeof mockPages): (typeof mockPages)[number] | undefined => {
+      for (const node of nodes) {
+        if (node.slug === slug) return node
+        const found = findPage(node.children)
+        if (found) return found
+      }
+      return undefined
+    }
+    const page = findPage(mockPages)
+    if (!page || page.status !== 'published') {
+      return HttpResponse.json({ error: 'Page not found' }, { status: 404 })
+    }
+    return HttpResponse.json(page)
+  }),
+
+  // --- Admin page endpoints ---
+
+  // GET /api/admin/pages
+  http.get(`${API_URL}/api/admin/pages`, ({ request }) => {
+    const auth = request.headers.get('Authorization')
+    if (!auth?.startsWith('Bearer ')) {
+      return HttpResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+    return HttpResponse.json({ pages: mockPages })
+  }),
+
+  // GET /api/admin/pages/:id
+  http.get(`${API_URL}/api/admin/pages/:id`, ({ request, params }) => {
+    const auth = request.headers.get('Authorization')
+    if (!auth?.startsWith('Bearer ')) {
+      return HttpResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+    const id = params['id'] as string
+    const findPage = (nodes: typeof mockPages): (typeof mockPages)[number] | undefined => {
+      for (const node of nodes) {
+        if (node.id === id) return node
+        const found = findPage(node.children)
+        if (found) return found
+      }
+      return undefined
+    }
+    const page = findPage(mockPages)
+    if (!page) {
+      return HttpResponse.json({ error: 'Page not found' }, { status: 404 })
+    }
+    return HttpResponse.json(page)
+  }),
+
+  // POST /api/admin/pages
+  http.post(`${API_URL}/api/admin/pages`, async ({ request }) => {
+    const auth = request.headers.get('Authorization')
+    if (!auth?.startsWith('Bearer ')) {
+      return HttpResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+    const body = (await request.json()) as Record<string, unknown>
+    const now = new Date().toISOString()
+    const newPage = {
+      id: `page-${Date.now()}`,
+      slug: body.slug ?? 'new-page',
+      title: body.title ?? 'New Page',
+      content: body.content ?? '',
+      status: body.status ?? 'draft',
+      metaDescription: body.metaDescription ?? null,
+      parentId: body.parentId ?? null,
+      sortOrder: body.sortOrder ?? 0,
+      communityDid: 'did:plc:test-community-123',
+      createdAt: now,
+      updatedAt: now,
+      children: [],
+    }
+    return HttpResponse.json(newPage, { status: 201 })
+  }),
+
+  // PUT /api/admin/pages/:id
+  http.put(`${API_URL}/api/admin/pages/:id`, async ({ request, params }) => {
+    const auth = request.headers.get('Authorization')
+    if (!auth?.startsWith('Bearer ')) {
+      return HttpResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+    const id = params['id'] as string
+    const findPage = (nodes: typeof mockPages): (typeof mockPages)[number] | undefined => {
+      for (const node of nodes) {
+        if (node.id === id) return node
+        const found = findPage(node.children)
+        if (found) return found
+      }
+      return undefined
+    }
+    const existing = findPage(mockPages)
+    if (!existing) {
+      return HttpResponse.json({ error: 'Page not found' }, { status: 404 })
+    }
+    const body = (await request.json()) as Record<string, unknown>
+    return HttpResponse.json({
+      ...existing,
+      ...body,
+      children: [],
+      updatedAt: new Date().toISOString(),
+    })
+  }),
+
+  // DELETE /api/admin/pages/:id
+  http.delete(`${API_URL}/api/admin/pages/:id`, ({ request }) => {
+    const auth = request.headers.get('Authorization')
+    if (!auth?.startsWith('Bearer ')) {
+      return HttpResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+    return new HttpResponse(null, { status: 204 })
+  }),
+
   // --- Sybil Detection endpoints ---
 
   // GET /api/admin/sybil-clusters