docs: add privacy policy and homepage/documentation/privacy URLs

PRIVACY.md documents that the plugin collects nothing, processes files
locally, reads no credentials, and only makes network requests to download
dependencies via install-dep.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DcUE1A6iyBfWDmpdR5JzNF

PRIVACY.md

@@ -0,0 +1,46 @@
+# Privacy Policy
+
+_Last updated: 2026-10-11_
+
+The **android-reverse-engineering** plugin for Claude Code is an open-source set of
+instructions and local scripts. It does not include any server, account, or
+telemetry operated by the author.
+
+## Data the plugin collects
+
+None. The plugin does not collect, store, or transmit personal data, usage
+statistics, or the files you analyze.
+
+## Local processing
+
+APK, XAPK, JAR, and AAR files are decompiled and searched entirely on your
+machine with locally installed tools (jadx, Vineflower/Fernflower, dex2jar).
+Output is written to a directory on your machine and nowhere else.
+
+The scripts do not read credentials, tokens, or API keys from your environment
+or files. The "auth" search options only scan the decompiled source you point
+them at for authentication-related strings.
+
+## Network access
+
+The only network requests the plugin's scripts make are dependency downloads,
+and only when you run `install-dep.sh` / `install-dep.ps1`:
+
+- release metadata and archives from GitHub (`api.github.com`, `github.com`)
+  for jadx, Vineflower, and dex2jar;
+- your system package manager (for example Homebrew, apt, winget, scoop, or
+  Chocolatey) when installing Java or jadx.
+
+These requests go directly to those services and are subject to their own
+privacy policies. No data about you or your analyzed files is included.
+
+## Claude
+
+Like any Claude Code plugin, the content Claude reads while using this plugin
+(for example decompiled source) is processed by Claude under Anthropic's terms
+and privacy policy, not by the plugin author.
+
+## Contact
+
+Questions or concerns: open an issue at
+https://github.com/SimoneAvogadro/android-reverse-engineering-skill/issues

plugins/android-reverse-engineering/.claude-plugin/plugin.json

@@ -5,10 +5,13 @@
   "author": {
     "name": "Simone Avogadro"
   },
+  "homepage": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",
   "repository": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill",
+  "documentationUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill#readme",
   "license": "Apache-2.0",
   "supportUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/issues/new",
   "termsOfServiceUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/master/LICENSE",
+  "privacyPolicyUrl": "https://github.com/SimoneAvogadro/android-reverse-engineering-skill/blob/master/PRIVACY.md",
   "keywords": ["android", "reverse-engineering", "apk", "jadx", "decompile", "api-extraction"],
   "skills": "./skills/",
   "commands": "./commands/"