78:T10b7,This PR updates the Terms of Service and Privacy Policy so users must be 18 or over, child sexual abuse material (CSAM) is explicitly prohibited, and both documents say how we detect, preserve and report it. It's the legal groundwork for CSAM screening: matching images against known-CSAM lists, even in log-only mode, creates a duty to report, so the terms need to say this before any screening starts. ## What changed **Terms of Service** (both pages' "last updated" dates are now 29 October 2026): - **§2 Eligibility:** the minimum age goes from 13 (under-18s with a parent's permission) to **18**. - **§4.3 Content moderation:** we still don't monitor content generally, but we may use automated tools, including hash-matching against known CSAM. - **§4.3 Child safety (new paragraph):** zero tolerance. We remove the material, suspend the accounts involved without notice or refund, preserve related information we hold, and report to NCMEC, the Internet Watch Foundation or the National Crime Agency. This applies despite content handling, I/O logging and zero data retention promises. "Information we hold" covers zero data retention requests, where we never store content. - **§5 Prohibited use:** a new first item covers uploading, generating, requesting, storing or distributing CSAM or content that sexualises minors, and building tools that produce it. **Privacy Policy:** - **§3 Legal bases:** a new purpose, detecting, preventing and reporting CSAM. Lawful basis: legal obligations and legitimate interests. - **§4 Sharing:** a new item for child-safety reports to NCMEC, the IWF, the NCA or other law enforcement. - **§6 Retention:** information preserved because of apparent CSAM is kept securely for up to a year, or longer where the law requires. This matches the US one-year preservation period. - **§8 Children:** the service is for adults 18 and over only. ## Why - Phaseo accepts and returns images, and stores some (avatars, I/O logs). Providers such as Anthropic report CSAM matches against the account that sent them, which on managed traffic is ours. - The old terms didn't mention CSAM and said we don't monitor content. That would conflict with the hash-matching we're adding. - Allowing 13–17-year-olds risked bringing the UK Online Safety Act's children's safety duties into play for a developer API with almost no teenage users. ## How - Text is changed in all 9 full locales (en-GB, de-DE, fr-FR, es-ES, pt-BR, ar-SA, hi, ja, zh-Hans). en-US has no legal overrides, so it uses en-GB. The edits were made by one script so every locale gets the same structural change. The translations are mine and haven't been reviewed by a native speaker. There's no "the English version prevails" clause, so a lawyer may want to add one. - The only new key is `termsBody.childSafety`, rendered under §4.3. The other additions are list items rendered with `.map`. Nothing reads these lists by index. ## Before and after | | Before | After | |---|---|---| | Minimum age (terms + privacy) | 13, or under 18 with a guardian's permission | 18 | | CSAM mentioned | nowhere | prohibited use, child-safety paragraph, legal basis, sharing, retention | | Monitoring | "We are not required to monitor User Content" | no general monitoring; automated hash-matching allowed | | Reporting and preservation | not mentioned | NCMEC / IWF / NCA; preserve for up to one year | ## Verification - With main's `apps/web` and `apps/docs` plus these changes, every step of `pnpm run validate:i18n` passes: localisation validation, the message-scope self-test, client scopes, and the docs search check. - All 9 locale files round-trip through JSON unchanged before editing, so the diff contains only the intended keys (+135 / −27). - Not run locally: `next build` and the page render. They're left to CI and the Vercel preview. ## Not legal advice These are being published now, ahead of the screening work. A lawyer should still review them afterwards. Open points: whether the UK Online Safety Act applies to us, whether to add an English-prevails clause, and whether the age change needs notice to existing users. Model: Claude Opus 5.5 (effort unknown) · Harness: Claude Code in T3 Code 🤖 Generated with [Claude Code](https://claude.com/claude-code) 79:T110f,The latest updates on your projects. Learn more about [Vercel for GitHub](https://vercel.link/github-learn-more). | Project | Deployment | Actions | Updated | |:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |:------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |:------------------------------------------------------------------------------- |:------------------------------------------------------------------------------------------ | | [phaseo](https://vercel.com/phaseo/phaseo) | ![Ready](https://cdn.trylle.com/media/images/c6f97f6a2d9a50bb079b9c2120bcabc5?key=Aag9OPWPryCkgfLUMIUiriowtODh4hqHlmlzdftFmfU8NF62NmcRWEZYaAzSgjXFV7CRHFmtwIUXQzGW%2FMiYFGynEBRM2ZcoaM4U6O0OS8PmNZa7IXMfoNTDcz9NEzKc17c%2BcAPOWyxWJVBjzZRRTanNPzdCPpYzbuN8NGKPs87X) [Ready](https://vercel.com/phaseo/phaseo/FYtM5QABekDhgtcPq9dzeiLkdaJd) | [Preview](https://phaseo-git-docs-terms-csam-18plus-20261029-phaseo.vercel.app) | Oct 29, 2026 5:10pm UTC |

7a:T1a58, > [!WARNING] > ## Review limit reached > > You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. > > **Next included review available in 9 minutes.** > > [Check out review usage here](https://app.coderabbit.ai/dashboard/review-capacity?orgId=ee02593a-5703-46d6-8f7b-6a6c34993c67). > >

View limit details

> > **Limit details:** You’ve used the included review currently available. > > [Learn how review limits work](https://docs.coderabbit.ai/management/rate-limits). > > **Review configuration:** > >

Run configuration

> > - **Source mode**: Auto > - **Repository**: Unavailable > - **Branch**: Unavailable > - **File**: No configuration file from this repository applied > - **Commit**: Unavailable > - **Layers**: defaults > - **Review profile**: CHILL > - **Plan**: Advanced > - **Run ID**: `5cbf17e1-5f5c-4684-ba46-b2c689a08c45` > >

> >

Commits

> > Reviewing files that changed from the base of the PR and between e8401f91c22182834b15ab3ac00afa7c9705a013 and 90bda4b308bbb1dc1a99a3360ca320ae1ffc30a0. > >

> >

Files selected for processing: 12

> > * `.changeset/terms-child-safety-18-plus.md` > * `apps/web/messages/ar-SA/site.json` > * `apps/web/messages/de-DE/site.json` > * `apps/web/messages/en-GB/site.json` > * `apps/web/messages/es-ES/site.json` > * `apps/web/messages/fr-FR/site.json` > * `apps/web/messages/hi/site.json` > * `apps/web/messages/ja/site.json` > * `apps/web/messages/pt-BR/site.json` > * `apps/web/messages/zh-Hans/site.json` > * `apps/web/src/app/[locale]/(legal)/privacy/page.tsx` > * `apps/web/src/app/[locale]/(legal)/terms/page.tsx` > >

> >

- [ ] Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts Thanks for using [CodeRabbit](https://coderabbit.ai?utm_source=oss&utm_medium=github&utm_campaign=phaseoteam/Phaseo&utm_content=3388)! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout\-out.

❤️ Share

- [x] () - [Mastodon](https://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai) - [Reddit](https://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai) - [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code)

_{Comment `@coderabbitai help` to get the list of available commands.} 7b:T488, ## Codex Review Summary This comment shows the latest Codex review activity on this pull request. | Review | Status | Commit | Review trigger | | --- | --- | --- | --- | | 📝 **Code Review** | ✅ **Completed** 2026-10-29T17:08:45.492615Z | `90bda4b` | PR opened |

ℹ️ About Codex in GitHub

[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you - Open a pull request for review - Mark a draft as ready - Comment "@codex review" or "@codex security review". Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

62:["$","$L75",null,{"entries":[{"key":["platform",{"userId":"anon"},"pulls","page",{"owner":"phaseo","repo":"Phaseo","pullNumber":2934}],"data":{"repositoryId":"2957","detail":{"author":{"avatarUrl":"https://cdn.trylle.com/media/images/1d2c64395adad5855568f8208e56cb88?key=ASxtuE7amJWLg2qW2Qa%2BQZnxJqY%2BdrX9XPtHO8YJoucYq8h14p6tKQjvctVGo55L4fjFJ7zeJoTQUD2galNUXY3kRHPjA2njISE3x17UeFkHAKGsyz62txOgwWMprJb%2Bzc605zAPJYkj6vjgBoS91rmqdEmiBVJoMdPEwgRMlu3Hi48THWC8xgDNUw%3D%3D","externalProvider":"github","login":"DanielButler1","type":"User","url":"https://github.com/DanielButler1"},"authorId":"72151886","baseRefName":"main","closedAt":null,"comments":4,"createdAt":"2026-10-29T17:07:09Z","headRefName":"docs/terms-csam-18plus-20261029","id":"4957791","isDraft":false,"labels":[],"number":2934,"repository":{"name":"Phaseo","owner":"phaseo","provider":"forgejo"},"state":"open","title":"docs(legal): terms and privacy policy require 18+ and cover child safety reporting","updatedAt":"2026-10-29T17:07:57Z","url":"https://trylle.com/phaseo/Phaseo/pulls/2934","body":"$78","additions":143,"deletions":29,"changedFiles":12,"commits":1,"reviewComments":0,"headSha":"90bda4b308bbb1dc1a99a3360ca320ae1ffc30a0","baseSha":"f6fe72f6c80574a4736b6f2130bc98de55784840","headRepoOwner":"phaseo","headRepoName":"Phaseo","isMerged":false,"mergeCommitSha":null,"mergedBy":null,"mergeable":true,"mergeableState":"clean","conflictingFiles":null,"requestedTeams":[],"requestedReviewers":[],"graphqlId":"issue:2934"},"comments":[{"id":27023841,"graphqlId":"27023841","body":"$79","createdAt":"2026-10-29T17:07:11Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/bd21565b4b886e5cef0db32c7f0344af?key=Ac2%2Bksi1LIlNHkTtZAwXv6tt09t6J3yi307LJjxqX4WJV7V2s6%2BI0Envy0ptnh0BgWnFPJBIWHoaJP7O2PIdz4%2FDyORhprU5SMAs88biowmDdp5P5wEqJwK9hocc32DyIwf1dkRFfPk7p4jIYoYYJT1K1dXJsF971VaTxvZB7cj8CL47nQE27ziOhg%3D%3D","externalProvider":"github","login":"vercel[bot]","type":"Bot","url":"https://github.com/apps/vercel"}},{"id":27023843,"graphqlId":"27023843","body":"$7a","createdAt":"2026-10-29T17:07:18Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/d39e0f17743c08d7bf625ba6f80c545a?key=Ac3dCIMfeEeTRToXUBeRdRfe7IGnH7FaknGcutnXETLNIDauVDMEeYfL%2BNJ1UW6PltLPYQ8AAbXVYTqKXZ2sbxmdR%2FJeAINpLPz%2Fgbhi3if42haJXKHU1rlVIjj4bCQzj6%2FWYhkNT360oU7wzsBjYZsV7FyaaYuuIlrb3O4TqxAm%2FsfmH46nFvfFacg%3D","externalProvider":"github","login":"coderabbitai[bot]","type":"Bot","url":"https://github.com/apps/coderabbitai"}},{"id":27023846,"graphqlId":"27023846","body":"$7b","createdAt":"2026-10-29T17:07:23Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/fdedb714e9add836fd78428365411061?key=AbTl84PUpcB4AQFwbMXuaKdUswwUmlivTOVSlxm3nEp0jqDQNNmsjqx0pi8Gv5DD6U88zm8KvjR%2B2dq3EuWbeQbbulrG%2BlcEiJ5GsJS7eQphSJmBFHIx4QT60r62zC1isNJWQJxzZY0LYUmSwyBvW%2BiCNKisU%2BSqP%2Bj2mf0aULYPwb3WpCDJRPYTyYg%3D","externalProvider":"github","login":"chatgpt-codex-connector[bot]","type":"Bot","url":"https://github.com/apps/chatgpt-codex-connector"}},{"id":27023847,"graphqlId":"27023847","body":"

Dependency Review

\n✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

\nNone\n\n","createdAt":"2026-10-29T17:07:57Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/618d0dadf2cc03e4da918f9fce155434?key=AZR2NWibZ4GI6G7n0snc5O%2FCy3ukthRybL%2FnPkuHfb%2BSDl5jyY%2BICnK7fBwKjvxrsVV6C0JPZxZTQgFdB8jeaILFLR9JfexsaUup8AkkgNnbAGbZgojNsOfLPmKPf7SYvH%2FYQb5ondr7R93kUYfqwz0RJC2nyFR5R%2Brm41rXkHLcotJyErDIvfgcMw%3D%3D","externalProvider":"github","login":"github-actions[bot]","type":"Bot","url":"https://github.com/apps/github-actions"}}],"commits":[{"sha":"90bda4b308bbb1dc1a99a3360ca320ae1ffc30a0","message":"docs(legal): require 18+ and add child safety terms\n\nTerms and Privacy Policy, in all nine full locales: minimum age 18,\nCSAM prohibited, automated hash-matching allowed, removal, suspension,\npreservation and reporting to NCMEC / IWF / NCA described, plus the\nmatching legal basis, sharing and retention entries.\n\nCo-Authored-By: Claude Opus 5.5 \n","createdAt":"2026-10-29T17:06:35Z","author":{"avatarUrl":"","login":"","name":"Daniel Butler","type":"User","url":""},"verification":{"verified":false,"reason":"gpg.error.not_signed_commit"}}],"events":[{"id":27023839,"event":"pull_push","createdAt":"2026-10-29T17:07:09Z","actor":{"id":792,"avatarUrl":"https://cdn.trylle.com/media/images/99989e2a6207ed4e2b97bbd983c1d988?key=AQvUSeXAxq0Vy171SA2j4tYMvk%2FwbDXAfjl7lHYRXSLPpNRYTOha3mQmi4Zq7%2FwxCuwMMHPrXxFpmiWY1uI0RLKPAGlpPgLdGvd%2FKZjOLA%2B1RH%2FWUYSdVmIbX6FOEFlUbwHnkHcIhRcku0RyBOOvU6WvqKwufh1ydBPaLebBUoWvMwQT%2FZ1M9zV%2B%2FmHbaTB723OVDwBhZjM6l4dBiv69mfbc%2BuWsDsJreZ%2BsxmPnLSmueJ%2FGmp0v%2FUc%3D","login":"danielbutler1","name":"Daniel","type":"User","url":"https://trylle.com/danielbutler1","authorAssociation":"MEMBER"},"body":"{\"is_force_push\":false,\"commit_ids\":[\"90bda4b308bbb1dc1a99a3360ca320ae1ffc30a0\"]}","commitIds":["90bda4b308bbb1dc1a99a3360ca320ae1ffc30a0"]}],"reviews":[],"stackEvents":[],"commentPagination":{"totalCount":4,"perPage":30,"loadedPages":[1]},"eventPagination":{"loadedPages":[1],"hasMore":false},"headRefDeleted":false},"fetchedAt":1793409100103}],"children":"$L7c"}] 64:null 6b:[["$","title","0",{"children":"Commits · docs(legal): terms and privacy policy require 18+ and cover child safety reporting · phaseo/Phaseo | Trylle"}],["$","meta","1",{"name":"description","content":"Commits on docs(legal): terms and privacy policy require 18+ and cover child safety reporting (#2934) in phaseo/Phaseo."}],["$","meta","2",{"name":"application-name","content":"Trylle"}],["$","link","3",{"rel":"manifest","href":"/manifest.json","crossOrigin":"$undefined"}],["$","meta","4",{"name":"keywords","content":"Commits · docs(legal): terms and privacy policy require 18+ and cover child safety reporting · phaseo/Phaseo, phaseo/Phaseo, phaseo/Phaseo repository, Phaseo, TypeScript repository, source code, trylle, agent-native git platform, git platform for agents and humans, git platform for ai agents, coding agent pull requests, ai code review, repository automation, stacked pull requests, two-way github sync, github-compatible actions, try cli"}],["$","meta","5",{"name":"robots","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","6",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","7",{"name":"googlebot","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","8",{"name":"twitter:domain","content":"trylle.com"}],["$","meta","9",{"name":"twitter:url","content":"https://trylle.com/phaseo/Phaseo/pulls/2934/commits"}],["$","link","10",{"rel":"canonical","href":"https://trylle.com/phaseo/Phaseo/pulls/2934/commits"}],["$","meta","11",{"name":"format-detection","content":"telephone=no"}],["$","meta","12",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","13",{"name":"apple-mobile-web-app-title","content":"Trylle"}],["$","meta","14",{"name":"apple-mobile-web-app-status-bar-style","content":"black-translucent"}],["$","meta","15",{"property":"og:title","content":"Commits · docs(legal): terms and privacy policy require 18+ and cover child safety reporting · phaseo/Phaseo | Trylle"}],["$","meta","16",{"property":"og:description","content":"Commits on docs(legal): terms and privacy policy require 18+ and cover child safety reporting (#2934) in phaseo/Phaseo."}],["$","meta","17",{"property":"og:url","content":"https://trylle.com/phaseo/Phaseo/pulls/2934/commits"}],["$","meta","18",{"property":"og:site_name","content":"Trylle"}],["$","meta","19",{"property":"og:locale","content":"en_US"}],["$","meta","20",{"property":"og:image","content":"https://trylle.com/api/og.png?kind=repo&owner=phaseo&repo=Phaseo"}],["$","meta","21",{"property":"og:image:secure_url","content":"https://trylle.com/api/og.png?kind=repo&owner=phaseo&repo=Phaseo"}],["$","meta","22",{"property":"og:image:type","content":"image/png"}],["$","meta","23",{"property":"og:image:width","content":"1200"}],["$","meta","24",{"property":"og:image:height","content":"630"}],["$","meta","25",{"property":"og:image:alt","content":"phaseo/Phaseo repository preview on Trylle"}],["$","meta","26",{"property":"og:type","content":"website"}],["$","meta","27",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","28",{"name":"twitter:site","content":"@trylle"}],["$","meta","29",{"name":"twitter:title","content":"Commits · docs(legal): terms and privacy policy require 18+ and cover child safety reporting · phaseo/Phaseo | Trylle"}],["$","meta","30",{"name":"twitter:description","content":"Commits on docs(legal): terms and privacy policy require 18+ and cover child safety reporting (#2934) in phaseo/Phaseo."}],["$","meta","31",{"name":"twitter:image","content":"https://trylle.com/api/og.png?kind=repo&owner=phaseo&repo=Phaseo"}],["$","meta","32",{"name":"twitter:image:alt","content":"phaseo/Phaseo repository preview on Trylle"}],["$","link","33",{"rel":"icon","href":"/favicon.png","type":"image/png"}],["$","link","34",{"rel":"icon","href":"/favicon-white.png","type":"image/png","media":"(prefers-color-scheme: dark)"}],"$L7d","$L7e"]

Commits on Thu, Oct 29, 2026