Add in-app privacy notice for debug logging (closes #14) (#15)

The debug-logging pipeline (LOG-1-9, #13) was only documented for
operators in README.md; end users of the Space saw no disclosure that
their image/video/prompts may be logged when enabled. Add an in-app
notice + Privacy Policy accordion, based on legitimate interest (GDPR
Art. 6(1)(f)), mirroring the FireRed-Image-Edit-1.0-Fast reference
project's equivalent notice. Logging itself is unchanged — still a
silent no-op unless LOG_HF_TOKEN/LOG_DATASET_REPO are set.


Claude-Session: https://claude.ai/code/session_01N8KBjSiiW8dPZc9KZru96q

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

README.md

@@ -47,7 +47,9 @@ comment at the top of `postprocess/upscale/upscale.py` for why.
 Each inference call can optionally be logged (prompt, seed, generation/interpolation/upscale
 settings, input image, pre-upscale output video, timing, success/error) to a private Hugging
 Face Hub dataset repo. Disabled by default — nothing is logged until both secrets below are set.
-Configure independently per Space under *Settings → Variables and secrets*:
+Logging is based on legitimate interest (GDPR Art. 6(1)(f)), not consent — see the notice and
+Privacy Policy shown in the app for details, including how to request access to or deletion of
+your data. Configure independently per Space under *Settings → Variables and secrets*:
 
 | variable | type | notes |
 |---|---|---|

app.py

@@ -51,6 +51,17 @@ _log_uploader = LogUploader(
     batch_interval=int(os.environ.get("LOG_BATCH_INTERVAL", "60")),
 )
 
+# SPACE_ID is set automatically by Hugging Face Spaces ("namespace/space_name") — used instead of a
+# hardcoded handle so the privacy notice stays correct for anyone who duplicates this Space.
+_SPACE_ID = os.environ.get("SPACE_ID")
+_OPERATOR_MD = (
+    f"[the Space operator](https://huggingface.co/{_SPACE_ID.split('/')[0]})" if _SPACE_ID else "the Space operator"
+)
+_COMMUNITY_MD = (
+    f"[this Space's Community tab](https://huggingface.co/spaces/{_SPACE_ID}/discussions)"
+    if _SPACE_ID else "this Space's Community tab"
+)
+
 
 def _gpu_duration(
     resized_image,
@@ -305,6 +316,63 @@ with gr.Blocks() as demo:
     gr.Markdown("# High Quality Video Generation")
     gr.Markdown("Turn a still image into a short video clip guided by a text prompt.")
 
+    gr.Markdown(
+        "- Service availability and response times may vary as this Space runs on shared GPU infrastructure.\n"
+        "- When using this Space, please comply with the "
+        "[Hugging Face Content Policy](https://huggingface.co/content-policy).\n"
+        f"- To monitor application performance and improve quality, input data (image/prompt) and generated "
+        f"outputs are logged solely for debugging purposes and retained in a private Hugging Face dataset "
+        f"accessible only to {_OPERATOR_MD}, automatically pruned once the dataset reaches its configured "
+        f"limit (oldest records deleted first). This processing is based on legitimate interest (GDPR Art. "
+        f"6(1)(f)) and the data is not shared with or sold to any third party. To request access to or "
+        f"deletion of your data, open a discussion on {_COMMUNITY_MD}. See the **Privacy Policy** below for "
+        "full details of your rights.\n"
+        "- No user account or identifying information (such as IP address or session data) is collected."
+    )
+
+    with gr.Accordion("Privacy Policy", open=False):
+        gr.Markdown(
+            f"**Space:** High Quality Video Generation  \n"
+            f"**Operator:** {_OPERATOR_MD}  \n"
+            f"**Last updated:** 2026-08-30\n"
+            "\n"
+            "#### What data is collected\n"
+            "When you submit a request, the following is logged: your uploaded input image, the generated "
+            "output video (pre-upscale, post-interpolation), your prompt and negative prompt, seed, inference "
+            "steps, guidance scale, frame-interpolation and upscaling settings, output resolution/fps/duration, "
+            "generation duration, and success/error status. No user account, IP address, or session data is "
+            "collected.\n"
+            "\n"
+            "#### Why it is collected\n"
+            "Solely for debugging and monitoring application performance (legitimate interest, GDPR Art. "
+            "6(1)(f)).\n"
+            "\n"
+            "#### Where it is stored\n"
+            f"In a private Hugging Face dataset accessible only to {_OPERATOR_MD}. The data is not shared with "
+            "or sold to any third party.\n"
+            "\n"
+            "#### How long it is kept\n"
+            "Entries are automatically pruned once the dataset reaches its configured storage cap (default "
+            "10GB) — the oldest entries are deleted first. The operator may also delete data manually at any "
+            "time.\n"
+            "\n"
+            "#### Your rights\n"
+            "Use of this Space and submission of images is entirely voluntary. Under GDPR you have the right "
+            "to:\n"
+            "- **Access** (Art. 15): request a copy of data held about you\n"
+            "- **Erasure** (Art. 17): request deletion of your data\n"
+            "- **Restriction** (Art. 18): request that processing be limited\n"
+            "- **Portability** (Art. 20): receive your data in a machine-readable format\n"
+            "- **Objection** (Art. 21): object to processing based on legitimate interest\n"
+            "\n"
+            f"To exercise any of these rights, open a discussion on {_COMMUNITY_MD}.\n"
+            "\n"
+            "#### Right to complain\n"
+            "You have the right to lodge a complaint with your national data protection authority, for example: "
+            "ICO (UK), CNIL (France), BfDI (Germany), or your local EU member state authority listed at "
+            "[edpb.europa.eu](https://www.edpb.europa.eu/about-edpb/about-edpb/members_en)."
+        )
+
     with gr.Row():
         with gr.Column():
             input_image_component = gr.Image(type="pil", label="Input Image", sources=["upload", "clipboard"])