Privacy control

Notification settings

Subscriptions are origin-bound, encrypted at rest, capped at one reviewed update per day, and removable here in one action.