Bring privacy.md up to date with the current build

[gtrtuugii]

privacy.md is dated 8 August 2026 and describes roughly the 2.2.0–2.5 extension. Several things have shipped since, and the policy's whole claim is that its list is complete, so the gaps matter more here than they would anywhere else.

Nothing below is a change in what the extension collects. It still collects nothing and still sends nothing anywhere. These are all things it stores on the user's own machine that the current text does not mention.

Missing entirely

• To-dos. The one place a user types their own words. The task text, its optional deadline, whether it repeats, and whether it is done — stored in Chrome's extension storage, which Chrome may sync between browsers the user is signed into. Worth saying plainly, because "stays on your device" reads differently when a device is plural.
• Recent task titles. For 24 hours after a task is finished, a simplified copy of its title is kept on that device only, so the same task cannot be completed repeatedly for experience. It expires on its own, and deleting the task does not clear it early.
• The room on the new tab. What it shows, and — the part a reader cannot guess — that it keeps a small copy of the pet, the lamp setting and the install date in the page's own local storage so it can draw instantly instead of flashing an empty room. Also worth stating: it does not read history, bookmarks or most-visited sites, there is no search box, and the default search engine is untouched. The view through its window is worked out from the computer's clock and time zone; no location is used.
• The rest of the storage list — the herd (species, colour, name, hat), the wardrobe (coins earned, hats owned), trinkets found, which share-card moments have been offered, onboarding progress, and the daily markers.

Needs amending

• The permissions table has no notifications row. It is optional, requested only when a to-do is given a deadline, used only when no pet is on screen to speak the reminder, and declining keeps reminders in the pet's speech bubble.
• The downloads row understates it. The current text describes noticing a finished download; the pet also writes a file when the user presses Save on a photo card. The Photo cards section already covers the save, so this is the permissions table catching up.
• "Zero network requests" is very slightly over-claimed. Uninstalling opens the goodbye page on this site, and GitHub Pages sees that visit like any other. No identifier is attached — the URL carries no query string, no version, no ID — but the honest sentence costs nothing and is better found here than discovered.
• The date.

The wording for each of these is drafted and ready to paste; it just needs a pass here.