Privacy
This PWA is a public tourism information site. Public users do not need to log in. Admin users authenticate through Supabase Auth. The front-end uses only a Supabase anon key and must never include a service-role key.
Before launch, confirm the final privacy wording, analytics tools and any form processing provider.