import type { Metadata } from "next";
import { PageHeader } from "@/components/PageHeader";
import { Container } from "@/components/Container";

export const metadata: Metadata = {
  title: "Privacy",
  description:
    "How OrthoGlobe handles personal data, cookies, and membership information.",
};

export default function PrivacyPage() {
  return (
    <>
      <PageHeader
        eyebrow="Privacy"
        title="Privacy Notice"
        lede="A short, plain-English summary of what we collect, why, and how to reach us. Our full GDPR-compliant policy is being drafted with counsel and will replace this notice before public launch."
      />
      <Container className="py-16">
        <div className="max-w-3xl space-y-8 text-[16px] leading-relaxed text-[var(--color-ink)]">
          <section className="space-y-3">
            <h2 className="text-[22px] font-semibold text-[var(--color-navy)]">
              What we collect
            </h2>
            <p className="text-[var(--color-slate)]">
              OrthoGlobe is currently a static, read-only site for public visitors. We
              do not run analytics scripts, advertising pixels, session replay, or any
              third-party trackers on public pages. The only data your browser sends is
              what is required for the page to load: your IP address and request
              headers, handled by our hosting provider (Hetzner, Germany) and CDN
              (Cloudflare). Standard server logs are retained for security and
              diagnostics only.
            </p>
          </section>

          <section className="space-y-3">
            <h2 className="text-[22px] font-semibold text-[var(--color-navy)]">
              Membership data
            </h2>
            <p className="text-[var(--color-slate)]">
              If you apply for membership we ask for the information shown on the
              application form (name, email, country, professional role, ORCID or
              LinkedIn link, and a short statement of interest). This is reviewed
              manually by an OrthoGlobe administrator. Approved members create a
              password, which is hashed with Argon2 — we never store passwords in
              plain text. We do not share applicant or member data with third parties.
            </p>
          </section>

          <section className="space-y-3">
            <h2 className="text-[22px] font-semibold text-[var(--color-navy)]">
              Cookies
            </h2>
            <p className="text-[var(--color-slate)]">
              Public pages set no cookies. After you sign in, a single first-party
              session cookie is set by NextAuth so the site can recognise you on
              subsequent requests. Signing out removes it.
            </p>
          </section>

          <section className="space-y-3">
            <h2 className="text-[22px] font-semibold text-[var(--color-navy)]">
              Your rights
            </h2>
            <p className="text-[var(--color-slate)]">
              You can request a copy, correction, or deletion of any personal data we
              hold about you by emailing the address below. We will respond within a
              reasonable timeframe. The full GDPR-compliant notice will detail the
              specific legal bases, retention periods, and complaint channels.
            </p>
          </section>

          <section className="space-y-3">
            <h2 className="text-[22px] font-semibold text-[var(--color-navy)]">
              Contact
            </h2>
            <p className="text-[var(--color-slate)]">
              Questions about this notice or your data:{" "}
              <a
                href="mailto:hello@orthoglobe.org"
                className="text-[var(--color-blue)] underline underline-offset-2"
              >
                hello@orthoglobe.org
              </a>
            </p>
          </section>
        </div>
      </Container>
    </>
  );
}
