/impressum and /datenschutz read the operator's details from the environment so they stay out of this repository, and show a visible notice until set. Portraits go through an allowlisted /api/img so visitors' IPs stay with us. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>