App Review off-binary surface: Support and Privacy URL audit
Parent: Apple Platform Publishing (Mac App Store) · Topic entry · 17 branches · skill apple-platform-publishing/references/app-review-off-binary-surface-support-privacy-urls.md
A published reference is not available for this topic yet.
Children
- In-app Help and Support menu item plus standard About panel for a Dock menu-bar app (rumps, PyObjC) (frontier)
- Apple App Privacy "web traffic" rule when a policy opens in WKWebView or SFSafariViewController (frontier)
- Reviewer-visit telemetry: Cloudflare zone analytics by ASN 714 for a review window (frontier)
- Cloudflare Email Address Obfuscation against contact-information checks on a Support URL (frontier)
- Soft-404 single-page fallback on Cloudflare Pages and why a 200 status proves nothing about a URL (frontier)
- Policy-versus-label wording: "collect", "receive", "share" and the third-party-partner definition for a bundled API SDK (frontier)
- 5.1.1(i) equal-protection confirmation wording for a bring-your-own-key AI provider (frontier)
- Optional Privacy Choices URL (App Store Connect) for a no-account app (frontier)
- Per-locale Support and Privacy URLs in App Store Connect (frontier)
- SBOM on the support site (Apple note) and the EU Cyber Resilience Act for bundled Python dependencies (frontier)
- GA4 consent mode and ePrivacy for the host site's EU visitors (frontier)
- Store-bundle strings for sudoers and privilege code against Guideline 2.4.5 static scans (frontier)
- Public repo as a reviewed surface: README scoping for a dual-edition project (frontier)
- First-party WebMCP bridge scripts on pages Apple may open (frontier)
- Trader-declaration contact parity: product-page address and phone against the Support page (frontier)
- Reopen-main-window menu rule for macOS Dock apps (Guideline 4) against Open Dashboard (frontier)
- Release-build URL gate design: injected fetcher, distinctive-string check, offline tests (frontier)
Frontier under this node: 5.1.1(i) equal-protection confirmation wording for a bring-your-own-key AI provider, Apple App Privacy "web traffic" rule when a policy opens in WKWebView or SFSafariViewController, Cloudflare Email Address Obfuscation against contact-information checks on a Support URL, First-party WebMCP bridge scripts on pages Apple may open, GA4 consent mode and ePrivacy for the host site's EU visitors, In-app Help and Support menu item plus standard About panel for a Dock menu-bar app (rumps, PyObjC), Optional Privacy Choices URL (App Store Connect) for a no-account app, Per-locale Support and Privacy URLs in App Store Connect, Policy-versus-label wording: "collect", "receive", "share" and the third-party-partner definition for a bundled API SDK, Public repo as a reviewed surface: README scoping for a dual-edition project, Release-build URL gate design: injected fetcher, distinctive-string check, offline tests, Reopen-main-window menu rule for macOS Dock apps (Guideline 4) against Open Dashboard, Reviewer-visit telemetry: Cloudflare zone analytics by ASN 714 for a review window, SBOM on the support site (Apple note) and the EU Cyber Resilience Act for bundled Python dependencies, Soft-404 single-page fallback on Cloudflare Pages and why a 200 status proves nothing about a URL, Store-bundle strings for sudoers and privilege code against Guideline 2.4.5 static scans, Trader-declaration contact parity: product-page address and phone against the Support page