{
    "schemaVersion":  "1.2",
    "contract":  "openacai-account-data",
    "generatedAtUtc":  "2026-07-07T19:54:10.2948809+00:00",
    "status":  "active-web-first",
    "policyRevision":  "2026.07.07",
    "accountFeatures":  {
                            "webProfilePreferences":  true,
                            "webProfilePreferenceExport":  true,
                            "webProfilePreferenceClear":  true,
                            "webGamhonCardExport":  true,
                            "publicAccountCreation":  false,
                            "nativeSignIn":  false,
                            "signedInSync":  false,
                            "authenticatedCaseStatus":  false,
                            "secureFileUploads":  false,
                            "publicSelfServiceDeletion":  false,
                            "broaderAccountDeletionByVerifiedRequest":  true,
                            "staffAndPartnerPortalsRequireCloudflareAccess":  true
                        },
    "profilePreferences":  {
                               "privateOnly":  true,
                               "noPublicDirectory":  true,
                               "browserShareCardExport":  true,
                               "shareCardExcludesAccountIdentifiers":  true,
                               "shareCardExcludesFreeTextNotes":  true,
                               "allowedFields":  [
                                                     "displayName",
                                                     "accessibilityAndGroupPlayNotes",
                                                     "visibilityPreference",
                                                     "avatarTheme",
                                                     "playStylePreferences",
                                                     "comfortBoundaries",
                                                     "contactBoundary"
                                                 ],
                               "maxLengths":  {
                                                  "displayName":  60,
                                                  "accessibilityAndGroupPlayNotes":  500
                                              },
                               "allowedAvatarThemes":  [
                                                           "forest",
                                                           "river",
                                                           "ember",
                                                           "violet"
                                                       ],
                               "allowedPlayStylePreferences":  [
                                                                   "calm",
                                                                   "puzzle",
                                                                   "cooperative",
                                                                   "creative",
                                                                   "story",
                                                                   "movement"
                                                               ],
                               "allowedComfortBoundaries":  [
                                                                "keyboard",
                                                                "reduced-motion",
                                                                "large-text",
                                                                "no-voice",
                                                                "small-groups",
                                                                "pass-allowed"
                                                            ],
                               "allowedContactBoundaries":  [
                                                                "staff-only",
                                                                "approved-groups",
                                                                "approved-contacts"
                                                            ],
                               "allowedVisibilityPreferences":  [
                                                                    "private",
                                                                    "friends",
                                                                    "moderated-public"
                                                                ]
                           },
    "requestUrls":  {
                        "privacyPolicy":  "https://openacai.com/privacy-policy/",
                        "accountPage":  "https://openacai.com/account/",
                        "contact":  "https://openacai.com/contact/",
                        "changePassword":  "https://openacai.com/.well-known/change-password",
                        "passwordReset":  "https://openacai.com/lost-password/",
                        "apiChangePassword":  "https://openacai.ong/.well-known/change-password",
                        "accountHelp":  "https://openacai.com/contact/?topic=privacy#openacai-contact-form-heading",
                        "dataDeletion":  "https://openacai.com/contact/?topic=privacy#openacai-contact-form-heading",
                        "dataExport":  "https://openacai.com/contact/?topic=privacy#openacai-contact-form-heading",
                        "dataCorrection":  "https://openacai.com/contact/?topic=privacy#openacai-contact-form-heading"
                    },
    "liveChecks":  {
                       "privacyPolicy":  {
                                             "url":  "https://openacai.com/privacy-policy/",
                                             "status":  200,
                                             "cacheControl":  "public, max-age=120, s-maxage=600, stale-while-revalidate=86400",
                                             "cfCacheStatus":  "HIT",
                                             "ok":  true
                                         },
                       "accountPage":  {
                                           "url":  "https://openacai.com/account/",
                                           "status":  200,
                                           "cacheControl":  "no-store, no-cache, must-revalidate, max-age=0",
                                           "cfCacheStatus":  "BYPASS",
                                           "ok":  true
                                       },
                       "privacyContact":  {
                                              "url":  "https://openacai.com/contact/?topic=privacy",
                                              "status":  200,
                                              "cacheControl":  "no-store, no-cache, must-revalidate, max-age=0",
                                              "cfCacheStatus":  "DYNAMIC",
                                              "ok":  true
                                          },
                       "privacyContactNoStore":  true,
                       "changePassword":  {
                                              "url":  "https://openacai.com/.well-known/change-password",
                                              "status":  302,
                                              "location":  "https://openacai.com/lost-password/",
                                              "cacheControl":  "no-store, must-revalidate, no-cache, max-age=0, private",
                                              "redirectsToPasswordReset":  true,
                                              "noStore":  true,
                                              "ok":  true
                                          },
                       "apiChangePassword":  {
                                                 "url":  "https://openacai.ong/.well-known/change-password",
                                                 "status":  302,
                                                 "location":  "https://openacai.com/lost-password/",
                                                 "cacheControl":  "no-store, must-revalidate, max-age=0",
                                                 "redirectsToPasswordReset":  true,
                                                 "noStore":  true,
                                                 "ok":  true
                                             }
                   },
    "identityBoundary":  {
                             "publicWebsiteAccounts":  "not offered",
                             "publicNativeAccounts":  "not offered",
                             "staffPortal":  "Cloudflare Access plus app roles on openacai.org",
                             "partnerPortal":  "Cloudflare Access plus app roles on openacai.ngo",
                             "futureHelpSeekerAuth":  "must ship behind a new explicit policy, consent screen, deletion/export workflow, and verifier update"
                         },
    "dataRights":  {
                       "webProfilePreferenceExport":  "browser-generated JSON export of GAMHON profile preference fields after sign-in",
                       "webGamhonCardExport":  "browser-generated JSON export of selected GAMHON card fields that excludes account identifiers and free-text notes",
                       "webProfilePreferenceClear":  "signed-in users can clear GAMHON display name, notes, and visibility preference without deleting the WordPress account",
                       "deletionRequests":  "handled through privacy/contact request until self-service account deletion exists",
                       "exportRequests":  "handled through privacy/contact request after identity and authority review",
                       "correctionRequests":  "handled through privacy/contact request or resource correction flow as applicable",
                       "automatedDeletionFromPublicClient":  false,
                       "publicContractDeletionClaims":  "none; public clients must not claim self-service deletion until this contract changes"
                   },
    "clientRules":  {
                        "showAccountUi":  false,
                        "showWebProfilePreferenceUi":  true,
                        "allowNativeAccountCreation":  false,
                        "allowSignedInSync":  false,
                        "allowAuthenticatedCaseStatus":  false,
                        "allowSecureFileUpload":  false,
                        "allowBrowserProfilePreferenceExport":  true,
                        "allowBrowserGamhonCardExport":  true,
                        "allowProfilePreferenceClear":  true,
                        "useWebContactForDeletionRequests":  true,
                        "useWebContactForExportRequests":  true,
                        "neverCacheAuthenticatedData":  true,
                        "neverSendProfileTextToAnalytics":  true,
                        "neverSendGamhonCardToAnalytics":  true,
                        "neverSendAccountIdentifiersToAnalytics":  true,
                        "shareCardMustExcludeAccountIdentifiers":  true,
                        "useWellKnownChangePassword":  true,
                        "openChangePasswordInExternalBrowser":  true,
                        "requireNewContractRevisionBeforeEnablingAccounts":  true
                    },
    "futurePrerequisites":  [
                                "published account deletion and export workflow",
                                "verified Cloudflare Access or first-party identity policy for the intended user class",
                                "consent copy and privacy-policy update",
                                "rate limits and anti-abuse controls for account endpoints",
                                "private cache bypass and no-store checks",
                                "mobile verifier checks for account enablement",
                                "app-store privacy review update"
                            ],
    "originHealth":  {
                         "databaseConfigured":  true,
                         "databaseOk":  true,
                         "cloudflareAccessConfigured":  true,
                         "r2Configured":  false,
                         "fileStorageConfigured":  true
                     },
    "privacy":  {
                    "publicOnly":  true,
                    "containsSecrets":  false,
                    "containsPrivateCaseData":  false,
                    "containsHelpSeekerMessages":  false,
                    "safeForDeviceCache":  true
                }
}