@@ -124,6 +124,16 @@ export default function PrivacyPolicyPage() {
USA
SCCs (standardavtalsklausuler)
+
+
Recapt
+
+ Produktanalys och användarfeedback. Laddas endast för
+ inloggade användare (ej sandbox/demo). Överförda
+ uppgifter: användar-ID, e-postadress och företagsnamn.
+
+
EU
+
SCCs vid eventuella underbiträden utanför EES
+
diff --git a/components/RecaptHideWidget.tsx b/components/RecaptHideWidget.tsx
new file mode 100644
index 00000000..9cc17c87
--- /dev/null
+++ b/components/RecaptHideWidget.tsx
@@ -0,0 +1,38 @@
+'use client'
+
+import { useEffect } from 'react'
+
+/**
+ * Hides Recapt's floating feedback bubble while keeping the SDK active so
+ * `window.recapt('identify', ...)` and programmatic `window.recapt('feedback',
+ * { message })` calls continue to work. Mounted globally in the root layout.
+ */
+export function RecaptHideWidget() {
+ useEffect(() => {
+ let attempts = 0
+ const maxAttempts = 50
+
+ const hide = (): boolean => {
+ if (typeof window.recapt !== 'function') return false
+ try {
+ window.recapt('feedback', { widget: 'hide' })
+ } catch {
+ // best-effort
+ }
+ return true
+ }
+
+ if (hide()) return
+
+ const interval = setInterval(() => {
+ attempts++
+ if (hide() || attempts >= maxAttempts) {
+ clearInterval(interval)
+ }
+ }, 100)
+
+ return () => clearInterval(interval)
+ }, [])
+
+ return null
+}
diff --git a/components/RecaptIdentify.tsx b/components/RecaptIdentify.tsx
new file mode 100644
index 00000000..90d98103
--- /dev/null
+++ b/components/RecaptIdentify.tsx
@@ -0,0 +1,37 @@
+'use client'
+
+import { useEffect } from 'react'
+
+export function RecaptIdentify({
+ userId,
+ email,
+ displayName,
+}: {
+ userId: string
+ email?: string
+ displayName?: string
+}) {
+ useEffect(() => {
+ let attempts = 0
+ const maxAttempts = 50
+ const interval = setInterval(() => {
+ if (typeof window.recapt === 'function') {
+ window.recapt('identify', {
+ uid: userId,
+ email,
+ nickname: displayName,
+ })
+ clearInterval(interval)
+ return
+ }
+ attempts++
+ if (attempts >= maxAttempts) {
+ clearInterval(interval)
+ }
+ }, 100)
+
+ return () => clearInterval(interval)
+ }, [userId, email, displayName])
+
+ return null
+}
diff --git a/components/RecaptLoader.tsx b/components/RecaptLoader.tsx
new file mode 100644
index 00000000..5c56e962
--- /dev/null
+++ b/components/RecaptLoader.tsx
@@ -0,0 +1,31 @@
+'use client'
+
+import Script from 'next/script'
+
+/**
+ * Loads the Recapt SDK for authenticated dashboard users only.
+ *
+ * Privacy guard rails:
+ * - Mounted inside the dashboard layout, so the script never loads on
+ * public pages (login, register, privacy policy, marketing). This
+ * prevents pre-consent IP/fingerprint collection on those routes.
+ * - The public key is sourced from NEXT_PUBLIC_RECAPT_PUBLIC_KEY so
+ * hosted and self-hosted deployments can each supply their own key
+ * (or disable Recapt entirely by leaving it unset).
+ * - data-persist / data-enable-user-comments are intentionally omitted
+ * from the default tag. Persistent cross-session tracking and
+ * unstructured free-text capture are opt-in product decisions, not
+ * defaults (GDPR Art. 25 — privacy by default).
+ */
+export function RecaptLoader() {
+ const publicKey = process.env.NEXT_PUBLIC_RECAPT_PUBLIC_KEY
+ if (!publicKey) return null
+
+ return (
+
+ )
+}
diff --git a/components/dashboard/DashboardNav.tsx b/components/dashboard/DashboardNav.tsx
index 8c193245..d9d8bea1 100644
--- a/components/dashboard/DashboardNav.tsx
+++ b/components/dashboard/DashboardNav.tsx
@@ -35,6 +35,7 @@ import {
import { getBranding } from '@/lib/branding/service'
import { ENABLED_EXTENSION_IDS as _ENABLED_EXTENSION_IDS } from '@/lib/extensions/_generated/enabled-extensions'
import { resolveIcon } from '@/lib/extensions/icon-resolver'
+import { clearRecaptIdentity } from '@/lib/recapt'
import { SupportLink } from '@/components/ui/support-link'
import {
DropdownMenu,
@@ -212,6 +213,7 @@ export default function DashboardNav({ companyName: _companyName, entityType, un
}
const handleLogout = async () => {
+ clearRecaptIdentity()
await supabase.auth.signOut()
router.push(isSandbox ? '/sandbox' : '/login')
}
diff --git a/components/settings/BookingTemplatesPanel.tsx b/components/settings/BookingTemplatesPanel.tsx
index e77021e3..1eb3f40f 100644
--- a/components/settings/BookingTemplatesPanel.tsx
+++ b/components/settings/BookingTemplatesPanel.tsx
@@ -18,7 +18,7 @@ import {
DialogTrigger,
} from '@/components/ui/dialog'
import { Loader2, Trash2, Plus, ChevronDown, Download, Upload, Building2, Users, Globe } from 'lucide-react'
-import { TEMPLATE_CATEGORY_LABELS } from '@/lib/bookkeeping/template-library'
+import { TEMPLATE_CATEGORY_LABELS, convertLibraryToBookingTemplate } from '@/lib/bookkeeping/template-library'
import { useCanWrite } from '@/lib/hooks/use-can-write'
import type { BookingTemplateLibrary, BookingTemplateCategory, BookingTemplateLibraryLine } from '@/types'
@@ -264,38 +264,43 @@ function TemplateSection({