fix: pkg: the font-awesome simplifying to work on bare-metal - & fix all warnings at build time #4

.env.dist

@@ -6,6 +6,12 @@
 APP_ENV=dev
 APP_SECRET=changethis
 APP_NAME=mineseeker
+# APP_PUBLIC_HOSTNAME: The public hostname for your application (used for generating absolute URLs in emails)
+# For production, set this to your domain (e.g., mineseeker.com)
+APP_PUBLIC_HOSTNAME=localhost
+# TRUSTED_PROXIES: Only needed for bare-metal dev behind a reverse proxy
+# For Docker development, this is set in compose.override.yaml
+# For production, set in PROD_ENV_FILE Gitea secret (use 172.18.0.0/16 initially)
 #TRUSTED_PROXIES=127.0.0.1,127.0.0.2
 #TRUSTED_HOSTS=localhost,example.com
 ###< symfony/framework-bundle ###

.gitchangelog.rc

@@ -0,0 +1,32 @@
+ignore_regexps = [
+    r'@minor', r'!minor',
+    r'@cosmetic', r'!cosmetic',
+    r'@refactor', r'!refactor',
+    r'@wip', r'!wip',
+    r'^(.{3,3}\s*:)?\s*[fF]irst commit.?\s*$',
+    r'^$',  ## ignore commits with empty messages
+    r'@skipChangelog', r'!skipChangelog', r'skipChangeLog', r'!skipChangeLog',
+    r'Merge branch', r'Merge remote-tracking branch', r'!deploy',
+]
+section_regexps = [
+    ('New', [
+        r'^[nN]ew\s*:\s*((dev|use?r|pkg|test|doc)\s*:\s*)?([^\n]*)$',
+     ]),
+    ('Changes', [
+        r'^[cC]hg\s*:\s*((dev|use?r|pkg|test|doc)\s*:\s*)?([^\n]*)$',
+     ]),
+    ('Fix', [
+        r'^[fF]ix\s*:\s*((dev|use?r|pkg|test|doc)\s*:\s*)?([^\n]*)$',
+     ]),
+    ('Other', None ## Match all lines
+     ),
+]
+body_process = ReSub(r'((^|\n)[A-Z]\w+(-\w+)*: .*(\n\s+.*)*)+$', r'') | strip
+subject_process = (strip |
+    ReSub(r'^([cC]hg|[fF]ix|[nN]ew)\s*:\s*((dev|use?r|pkg|test|doc)\s*:\s*)?([^\n@]*)(@[a-z]+\s+)*$', r'\4') |
+    SetIfEmpty("No commit message.") | ucfirst | final_dot)
+tag_filter_regexp = r'^(v)?[0-9]+\.[0-9]+(\.[0-9]+)?(\-[0-9]+)?$'
+unreleased_version_label = "(unreleased)"
+output_engine = mustache("markdown")
+include_merge = True
+revs = []

CHANGELOG.md

@@ -1,177 +1,390 @@
-Changelog
-=========
+# Changelog
 
 
-v2026.01 (2026-04-14)
----------------------
+## v2026.2.1-8 (2026-04-18)
 
-New
-~~~
-- Registered users have avatars next to the timer #4. [Lang]
-- Add opportunity to use profile picture. #4. [Lang]
-- Add more stats and a dialog for the recent battle that can be
-  shareable #4. [Lang]
-- Implement the 2FA authentication (TOTP and backup codes) #4. [Lang]
-- Add beta logo to the corner #3. [Lang]
-- Add mineseeker game to the symfony 4 project #3. [Lang]
-- Upgrade to the latest symfony v4 #3. [Lang]
+### Fix
 
-Changes
-~~~~~~~
-- Fix missing favicon #4. [Lang]
-- Add modern Webauthn authentication #4. [Lang]
-- Refactor all forms to have Symfony Form Types & Validation
-  Constrainsts - & implement Google ReCapthca v3 #4. [Lang]
-- Add forgot password functionality #4. [Lang]
-- Increase the minimum PHP version to the latest major - and massive
-  refactor on back-end, like Controllers and Repositories #4. [Lang]
-- Redesign the resign dialog #4. [Lang]
-- Re-implement the waiting for opponent dialog - refactor its gfx - &
-  add online user selection dialog #4. [Lang]
-- Improve the gfx on homepage - implement login/register and activation
-  for authentication - and add the first version of profile page #4.
-  [Lang]
-- Refactor and redesign the gfx on front-end #4. [Lang]
-- Add timers to each player - renew the whole migration #4. [Lang]
-- Use namespaces for front-end #4. [Lang]
-- Replace webpack w/ vite & remove old, legacy jQuery from the code #4.
-  [Lang]
-- More, massive refactor for front-end #4. [Lang]
-- Massive refactor on front-end - and remove unnecessary deps #4. [Lang]
-- Change the code style to fit the current standard #4. [Lang]
-- Refactor to use Attributes instead of yaml markdown #4. [Lang]
-- Outsource the Grid generation and interactions to the backend #4.
-  [Lang]
-- Remove unnecessary variables and prune the Facebook registration
-  method #4. [Lang]
-- Replace the legacy gos/web-socket-bundle & replace it with Mercure
-  protocol #4. [Lang]
-- Created the first working solution since 7 yrs #4. [Lang]
-- Make the first working version - the stepping is broken due to the
-  algorythm structure #4. [Lang]
-- Change the composer default php minimum environment #3. [Lang]
-- Change the default url to wss on frontend #3. [Lang]
-- Refactor Rpc and Topic classes #3. [Lang]
-- Refactor classes and reformat some layout #3. [Lang]
-- Remove deprecated files #3. [Lang]
-- Doc in README.md #3. [Lang]
-- Gitignore a js.map file #2. [Lang]
-
-Other
-~~~~~
-- Hg: pkg: new version release !skipChangelog. [Lang]
-- Pkg: usr: solve the not-working mailing on dev env under docker #4.
-  [Lang]
-- Deploy version 1.1.0 !deploy #11. [Lang]
+* Quickfix for https-only login - & add user data when the user is not logged in #4. [Lang]
 
 
-1.1.0 (2019-10-26)
-------------------
+## v2026.2.1-7 (2026-04-16)
 
-Changes
-~~~~~~~
-- Reinit project - disable redis module and make the project compatible
-  w/ PHP7.3 #2. [Lang]
+### Changes
+
+* Add consent checkbox to user's registration - and fix the sharing pics #4. [Lang]
+
+* Add correct version numbering and CHANGELOG - and add the LICENSE #4. [Lang]
 
 
-0.4.0 (2019-10-26)
-------------------
-- Change session driver to REDIS. [Lang]
-- Add created, updated field to db && improve graph design. [Lang]
-- Cache setup && optimalize for google pagespeed && optimalize all
-  images. [Lang]
-- Improve graph design on homepage && add footer and techs && add
-  official pages. [Lang]
-- Bugfix mine websocket periodic mysql calling. [Lang]
-- Bugfix hwioauth remember me && centralize hwioauth and facebook
-  settings. [Lang]
-- Centralize jquery && bugfix mysql auto-termination problem w/ user
-  auth. [Lang]
-- Release beta4. [Lang]
-- Gitignore npm debug log. [Lang]
-- Add english lang everywhere && add snowfall && add centralized version
-  nbr && improve stylesheet && slack integration. [Lang]
-- Bugfix #30 && random bg in game. [Lang]
-- Add google analytics and facebook scripts && improve url share method
-  w/ fb && enforce https in prod. [Lang]
-- Reg and login buttons on index && remove list method && facebook
-  centralize. [Lang]
-- Redesign user frontend. [Lang]
-- Mods for performance; one js.min file on prod. [Lang]
-- Improve webpack config for prod compile #23. [Lang]
-- Ssl handling #22 && reconnection issues #20, #21. [Lang]
-- Facebook prod settings w/ app; hwi/HWIOAuthBundle. [Lang]
-- Refact && game reconnection and restore w/o refresh #3 && bugfix bomb
-  explosion on opponent mines #19. [Lang]
-- Typo in rpc. [Lang]
-- Handle prod mysql timeout && graphics improve. [Lang]
-- Gitignore webpacked index.js. [Lang]
-- Add production mods. [Lang]
-- Bugfix points saving and exploded bombs to db && you can resign #6.
-  [Lang]
-- Bugfix resign button existence #11. [Lang]
-- Bugfix opponent bomb btn buzz on hover #10. [Lang]
-- Bugfix points problem in the end #16. [Lang]
-- Add desc to every user #9. [Lang]
-- Clipboard - not working #8. [Lang]
-- Random player on start #5. [Lang]
-- Show left mines after end #2 && reduce network traffic && better
-  active field checking method. [Lang]
-- Some refactor #13. [Lang]
-- Bugfix grid field render #12. [Lang]
-- Game ends after x mines. [Lang]
-- Add new sounds && refactor && new bg images && form redesigns. [Lang]
-- Bugfix entities gridrow, grid && improve graph design on homepage.
-  [Lang]
-- Some refactor && prod settings. [Lang]
-- Improve graphics design in game. [Lang]
-- Bugfix grid row in entity. [Lang]
-- Bugfix changePlayer after bomb explosion. [Lang]
-- Improve game graph design. [Lang]
-- Login and register form more design. [Lang]
-- Add basic design to userbundle && refactor. [Lang]
-- Add font-awesome. [Lang]
-- Working user authentication w/ fb and plain login. [Lang]
-- Add facebook login module, hwi/HWIOAuthBundle. [Lang]
-- Login && register form overrided. [Lang]
-- Js and config refactor. [Lang]
-- Replace gridcol object to json array in db. [Lang]
-- Refactor. [Lang]
-- Save steps and point info to db. [Lang]
-- Save the step data to db. [Lang]
-- Renamed the acme to mineseeker && handle when the user connection has
-  been lost. [Lang]
-- Add player names to UI. [Lang]
-- Add overlay && game do not start until the opponent came. [Lang]
-- Add base64 encryption to grid when it has been sended to server.
-  [Lang]
-- On click opponents bomb, you cannot target && refactor. [Lang]
-- Warning when player has been found more than 20 mines. [Lang]
-- Bugfix center mine counter animation. [Lang]
-- The opponent is the next when bomb is exploded. [Lang]
-- Current username checked && refactor && remove players in channel when
-  they are more than 2. [Lang]
-- Send bomb info and use it on opponent. [Lang]
-- Add sounds w/ howler. [Lang]
-- Bugfix multiple empty fields w/ one click on opponent view. [Lang]
-- Refact && remove sound and logging && bugfix BIGBUG - handleGridField
-  and showAppropriateFields sort order... [Lang]
-- Create first working communication. [Lang]
-- Create entities and repositories. [Lang]
-- Changed websocket default port && debug RPC. [Lang]
-- Created working session and client  handler w/ websocket. [Lang]
-- Working websocket client and server w/o session handling and storage.
-  [Lang]
-- Composer update. [Lang]
-- Improve game && start sound creating. [Lang]
-- Refactor grid control and grid field. [Lang]
-- Created basic game w/ table and animations. [Lang]
-- Websocket basic setup FE & BE && working basic game w/ react &&
-  webpack & babel config. [Lang]
-- Gitignore node_modules && add symlink to node_modules (just for
-  install) && basic react. [Lang]
-- Add react hello world. [Lang]
-- Rename project in config. [Lang]
-- Initial commit && create project in symfony3. [Lang]
+## v2026.2.1-6 (2026-04-16)
+
+### Changes
+
+* Update all texts on all pages - extend them with the game specific things #4. [Lang]
+
+
+## v2026.2.1-5 (2026-04-16)
+
+### Fix
+
+* The meta tags does not have https scheme - nothing worked in configuration #4. [Lang]
+
+
+## v2026.2.1-4 (2026-04-15)
+
+### New
+
+* Add notification email when a user is registered #4. [Lang]
+
+### Changes
+
+* Add notification on activation too #4. [Lang]
+
+
+## v2026.2.1-2 (2026-04-15)
+
+### Fix
+
+* Another attempt to fix the email assets #4. [Lang]
+
+
+## v2026.2.1-1 (2026-04-15)
+
+### Fix
+
+* The images does not shows in emails #4. [Lang]
+
+
+## v2026.2.1-0 (2026-04-15)
+
+### New
+
+* Add Contact page with email sending behaviour #4. [Lang]
+
+### Changes
+
+* Add missing .env variable and increase the version number and add missing data from front-end and back-end deps descriptor #4. [Lang]
+
+* Change the shareable battle - add avatars to it - even on the og tags #4. [Lang]
+
+* Change text #4. [Lang]
+
+### Fix
+
+* The mailhog is crashed on development env #4. [Lang]
+
+* The og tags did not have proper http schema - they should have https #4. [Lang]
+
+
+## v2026.2.0-5 (2026-04-14)
+
+### Changes
+
+* Add donation button #4. [Lang]
+
+
+## v2026.2.0-4 (2026-04-14)
+
+### New
+
+* Add timer for the acceptance of the challenge #4. [Lang]
+
+### Changes
+
+* Protect the gameplay with recaptcha #4. [Lang]
+
+* The waiting dialog is uncloseable until the time is up #4. [Lang]
+
+* Add share button to the overlay when the game ends #4. [Lang]
+
+* Make fancy og tags - and create a special one for battle sharing #4. [Lang]
+
+### Fix
+
+* Missing font-awesome icons on bare-metal environment #4. [Lang]
+
+
+## v2026.2.0-3 (2026-04-14)
+
+### Changes
+
+* The user's avatar will be saved as a uuid.extension #4. [Lang]
+
+
+## v2026.2.0-1 (2026-04-14)
+
+### Fix
+
+* Quickfix for email sending #4. [Lang]
+
+
+## v2026.2.0-0 (2026-04-14)
+
+### New
+
+* Registered users have avatars next to the timer #4. [Lang]
+
+* Add opportunity to use profile picture. #4. [Lang]
+
+* Add more stats and a dialog for the recent battle that can be shareable #4. [Lang]
+
+* Implement the 2FA authentication (TOTP and backup codes) #4. [Lang]
+
+* Add beta logo to the corner #3. [Lang]
+
+* Add mineseeker game to the symfony 4 project #3. [Lang]
+
+* Upgrade to the latest symfony v4 #3. [Lang]
+
+### Changes
+
+* Implement CD script to Gitea and add docs to the process #4. [Lang]
+
+* Remove unnecessary cdn based fonts #4. [Lang]
+
+* Update docs #4. [Lang]
+
+* Add JWT generation script to make Mercure safe #4. [Lang]
+
+* Fix missing favicon #4. [Lang]
+
+* Make compatible the whole project with bare metal AND with docker #4. [Lang]
+
+* Add modern Webauthn authentication #4. [Lang]
+
+* Refactor all forms to have Symfony Form Types & Validation Constrainsts - & implement Google ReCapthca v3 #4. [Lang]
+
+* Add forgot password functionality #4. [Lang]
+
+* Increase the minimum PHP version to the latest major - and massive refactor on back-end, like Controllers and Repositories #4. [Lang]
+
+* Redesign the resign dialog #4. [Lang]
+
+* Re-implement the waiting for opponent dialog - refactor its gfx - & add online user selection dialog #4. [Lang]
+
+* Improve the gfx on homepage - implement login/register and activation for authentication - and add the first version of profile page #4. [Lang]
+
+* Refactor and redesign the gfx on front-end #4. [Lang]
+
+* Upgrade to the latest LTS Symfony package and backend #4. [Lang]
+
+* Add timers to each player - renew the whole migration #4. [Lang]
+
+* Update the vite related stuff because CORS and React errors - reinit the miration #4. [Lang]
+
+* Use namespaces for front-end #4. [Lang]
+
+* Replace webpack w/ vite & remove old, legacy jQuery from the code #4. [Lang]
+
+* More, massive refactor for front-end #4. [Lang]
+
+* Massive refactor on front-end - and remove unnecessary deps #4. [Lang]
+
+* Change the code style to fit the current standard #4. [Lang]
+
+* Refactor to use Attributes instead of yaml markdown #4. [Lang]
+
+* Outsource the Grid generation and interactions to the backend #4. [Lang]
+
+* Remove unnecessary variables and prune the Facebook registration method #4. [Lang]
+
+* Replace the legacy gos/web-socket-bundle & replace it with Mercure protocol #4. [Lang]
+
+* Make a massive refactor to the backend and remove all unnecessary deps - and make small refactors for the frontend too #4. [Lang]
+
+* Created the first working solution since 7 yrs #4. [Lang]
+
+* Add some changes on BE - add eslint and editorconfig - and add some deps #4. [Lang]
+
+* Make the first working version - the stepping is broken due to the algorythm structure #4. [Lang]
+
+* Change the composer default php minimum environment #3. [Lang]
+
+* Change the default url to wss on frontend #3. [Lang]
+
+* Refactor Rpc and Topic classes #3. [Lang]
+
+* Refactor classes and reformat some layout #3. [Lang]
+
+* Remove deprecated files #3. [Lang]
+
+* Doc in README.md #3. [Lang]
+
+* Gitignore a js.map file #2. [Lang]
+
+### Other
+
+* Pkg: usr: solve the not-working mailing on dev env under docker #4. [Lang]
+
+
+## 1.1.0 (2019-10-26)
+
+### Changes
+
+* Reinit project - disable redis module and make the project compatible w/ PHP7.3 #2. [Lang]
+
+
+## 0.4.0 (2019-10-26)
+
+### Other
+
+* Change session driver to REDIS. [Lang]
+
+* Add created, updated field to db && improve graph design. [Lang]
+
+* Cache setup && optimalize for google pagespeed && optimalize all images. [Lang]
+
+* Improve graph design on homepage && add footer and techs && add official pages. [Lang]
+
+* Bugfix mine websocket periodic mysql calling. [Lang]
+
+* Bugfix hwioauth remember me && centralize hwioauth and facebook settings. [Lang]
+
+* Centralize jquery && bugfix mysql auto-termination problem w/ user auth. [Lang]
+
+* Release beta4. [Lang]
+
+* Gitignore npm debug log. [Lang]
+
+* Add english lang everywhere && add snowfall && add centralized version nbr && improve stylesheet && slack integration. [Lang]
+
+* Bugfix #30 && random bg in game. [Lang]
+
+* Add google analytics and facebook scripts && improve url share method w/ fb && enforce https in prod. [Lang]
+
+* Reg and login buttons on index && remove list method && facebook centralize. [Lang]
+
+* Redesign user frontend. [Lang]
+
+* Mods for performance; one js.min file on prod. [Lang]
+
+* Improve webpack config for prod compile #23. [Lang]
+
+* Ssl handling #22 && reconnection issues #20, #21. [Lang]
+
+* Facebook prod settings w/ app; hwi/HWIOAuthBundle. [Lang]
+
+* Refact && game reconnection and restore w/o refresh #3 && bugfix bomb explosion on opponent mines #19. [Lang]
+
+* Typo in rpc. [Lang]
+
+* Handle prod mysql timeout && graphics improve. [Lang]
+
+* Gitignore webpacked index.js. [Lang]
+
+* Add production mods. [Lang]
+
+* Bugfix points saving and exploded bombs to db && you can resign #6. [Lang]
+
+* Bugfix resign button existence #11. [Lang]
+
+* Bugfix opponent bomb btn buzz on hover #10. [Lang]
+
+* Bugfix points problem in the end #16. [Lang]
+
+* Add desc to every user #9. [Lang]
+
+* Clipboard - not working #8. [Lang]
+
+* Random player on start #5. [Lang]
+
+* Show left mines after end #2 && reduce network traffic && better active field checking method. [Lang]
+
+* Some refactor #13. [Lang]
+
+* Bugfix grid field render #12. [Lang]
+
+* Game ends after x mines. [Lang]
+
+* Add new sounds && refactor && new bg images && form redesigns. [Lang]
+
+* Bugfix entities gridrow, grid && improve graph design on homepage. [Lang]
+
+* Some refactor && prod settings. [Lang]
+
+* Improve graphics design in game. [Lang]
+
+* Bugfix grid row in entity. [Lang]
+
+* Bugfix changePlayer after bomb explosion. [Lang]
+
+* Improve game graph design. [Lang]
+
+* Login and register form more design. [Lang]
+
+* Add basic design to userbundle && refactor. [Lang]
+
+* Add font-awesome. [Lang]
+
+* Working user authentication w/ fb and plain login. [Lang]
+
+* Add facebook login module, hwi/HWIOAuthBundle. [Lang]
+
+* Login && register form overrided. [Lang]
+
+* Js and config refactor. [Lang]
+
+* Replace gridcol object to json array in db. [Lang]
+
+* Refactor. [Lang]
+
+* Save steps and point info to db. [Lang]
+
+* Save the step data to db. [Lang]
+
+* Renamed the acme to mineseeker && handle when the user connection has been lost. [Lang]
+
+* Add player names to UI. [Lang]
+
+* Add overlay && game do not start until the opponent came. [Lang]
+
+* Add base64 encryption to grid when it has been sended to server. [Lang]
+
+* On click opponents bomb, you cannot target && refactor. [Lang]
+
+* Warning when player has been found more than 20 mines. [Lang]
+
+* Bugfix center mine counter animation. [Lang]
+
+* The opponent is the next when bomb is exploded. [Lang]
+
+* Current username checked && refactor && remove players in channel when they are more than 2. [Lang]
+
+* Send bomb info and use it on opponent. [Lang]
+
+* Add sounds w/ howler. [Lang]
+
+* Bugfix multiple empty fields w/ one click on opponent view. [Lang]
+
+* Refact && remove sound and logging && bugfix BIGBUG - handleGridField and showAppropriateFields sort order... [Lang]
+
+* Create first working communication. [Lang]
+
+* Create entities and repositories. [Lang]
+
+* Changed websocket default port && debug RPC. [Lang]
+
+* Created working session and client  handler w/ websocket. [Lang]
+
+* Working websocket client and server w/o session handling and storage. [Lang]
+
+* Composer update. [Lang]
+
+* Improve game && start sound creating. [Lang]
+
+* Refactor grid control and grid field. [Lang]
+
+* Created basic game w/ table and animations. [Lang]
+
+* Websocket basic setup FE & BE && working basic game w/ react && webpack & babel config. [Lang]
+
+* Gitignore node_modules && add symlink to node_modules (just for install) && basic react. [Lang]
+
+* Add react hello world. [Lang]
+
+* Rename project in config. [Lang]
+
+* Initial commit && create project in symfony3. [Lang]
 
 

Caddyfile

@@ -13,6 +13,10 @@
 
 	encode zstd br gzip
 
+	# Forward scheme information to the PHP application
+	header X-Forwarded-Proto {scheme}
+	header X-Forwarded-Host {host}
+
 	mercure {
 		transport_url    {$MERCURE_TRANSPORT_URL:bolt:///data/mercure.db}
 		publisher_jwt    {$MERCURE_JWT_SECRET} HS256

Dockerfile

@@ -22,6 +22,12 @@ RUN install-php-extensions \
     apcu \
     sodium
 
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    fonts-dejavu-core \
+    fontconfig \
+    && fc-cache -f -v \
+    && rm -rf /var/lib/apt/lists/*
+
 RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
 RUN printf '[opcache]\nopcache.enable=1\nopcache.memory_consumption=256\nopcache.max_accelerated_files=20000\nopcache.validate_timestamps=0\n' \
     > "$PHP_INI_DIR/conf.d/opcache.ini"

LICENSE

@@ -0,0 +1,124 @@
+GNU GENERAL PUBLIC LICENSE
+Version 3, 29 June 2007
+
+Copyright (C) 2026 SplendidBear (https://www.splendidbear.org)
+
+MineSeeker is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+MineSeeker is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+---
+
+TERMS AND CONDITIONS:
+
+0. Definitions.
+
+   "This License" refers to version 3 of the GNU General Public License.
+
+   "Copyright" also means copyright-like laws that apply to other kinds of works.
+
+   "The Program" refers to any copyrightable work licensed under this License.
+
+   "You" refers to each licensee.
+
+   "Legal entities" means the union of the acting entity and all other entities
+   that control, are controlled by, or are under common control with that entity.
+
+   "Modify" means to copy from or adapt all or part of the work in a fashion
+   requiring copyright permission, other than the making of an exact copy.
+
+1. Source Code.
+
+   The "source code" for a work means the preferred form of the work for making
+   modifications to it. "Object code" means any non-source form of a work.
+
+2. Basic Permissions.
+
+   All rights granted under this License are granted for the term of copyright
+   on the Program. You are granted all permissions necessary to run, modify and
+   propagate covered works by this License.
+
+3. Copyleft - Derivative Works.
+
+   If you modify the Program, your modified version must:
+
+   - Carry prominent notices stating that you have modified it
+   - License the entire work under this License or a compatible license
+   - Make the source code available to recipients
+   - Preserve all notices of previous licensing
+
+4. Conveying Verbatim Copies.
+
+   You may convey verbatim copies of the Program's source code as you receive it,
+   provided that you:
+
+   - Keep intact all notices of authorship and licensing
+   - Give recipients access to the source code along with this License
+   - Do not modify anything except the License itself
+
+5. Conveying Modified Source Versions.
+
+   You may convey a work based on the Program under this License provided that:
+
+   - The work must be licensed as a whole under this License
+   - You must give prominent notice of any modifications
+   - You must provide access to the Corresponding Source code
+   - You preserve all licensing notices
+
+6. Conveying Non-Source Forms.
+
+   If you convey object code or compiled versions, you must also provide:
+
+   - The Corresponding Source code (in machine-readable form)
+   - A notice of the terms under which it is licensed
+
+7. Additional Terms.
+
+   No additional restrictions may be placed on the exercise of the rights
+   granted or affirmed under this License.
+
+8. Disclaimer of Warranty.
+
+   THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+   APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+   HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+   OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+   THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+   PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+   IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+   ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+9. Limitation of Liability.
+
+   IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+   WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+   THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING
+   ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF
+   THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS
+   OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR
+   THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+   EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+   SUCH DAMAGES.
+
+---
+
+For the complete GPL-3.0-or-later license text, visit:
+https://www.gnu.org/licenses/gpl-3.0.html
+
+For more information about GNU GPL, visit:
+https://www.gnu.org/licenses/
+
+MineSeeker is a multiplayer minesweeper game inspired by MSN Messenger's game.
+Project: https://www.mineseeker.hu
+Author: SplendidBear (https://www.splendidbear.org)
+
+

Makefile

@@ -11,6 +11,7 @@ help:
 	@echo "  make down                - Stop and remove containers/networks"
 	@echo "  make prune-everything    - Prune volumes, networks and images (DANGEROUS!)"
 	@echo "  make db-reset            - Reset the database (drop, create, migrate) (DANGEROUS!)"
+	@echo "  make ccp                 - Clear the production cache"
 
 start:
 	docker compose up -d
@@ -51,3 +52,6 @@ db-reset:
 	bin/console doctrine:database:drop --force --if-exists --no-interaction
 	bin/console doctrine:database:create --if-not-exists --no-interaction
 	bin/console doctrine:migrations:migrate --no-interaction
+
+ccp:
+	bin/console cache:clear --no-warmup --env=prod

README.md

@@ -151,6 +151,7 @@ services:
   app:
     environment:
       MAILER_DSN: smtp://mail:1025?verify_peer=0
+      TRUSTED_PROXIES: "0.0.0.0/0"
   mail:
     image: mailhog/mailhog:latest
     ports:
@@ -233,8 +234,13 @@ MERCURE_SUBSCRIBER_JWT="<generated by make mercure-jwt>"
 APP_PUBLIC_HOSTNAME=mineseeker.hu
 WEBAUTHN_RP_ID=mineseeker.hu
 WEBAUTHN_ORIGIN=https://mineseeker.hu
-```
 
+# OG Tags & Social Media Sharing (IMPORTANT for Docker deployments)
+# TRUSTED_PROXIES: IP address (or range) of your reverse proxy (Caddy/Nginx)
+# This ensures OG image tags use HTTPS URLs instead of HTTP
+TRUSTED_PROXIES="172.18.0.0/16"
+TRUSTED_HOSTS="mineseeker.hu,www.mineseeker.hu"
+```
 ### Production server: one-time setup
 
 The server needs Docker, Git, and a self-hosted `act_runner` registered against the Gitea repository. Bun and Composer run inside the multi-stage Dockerfile, so they are not needed on the server.
@@ -254,7 +260,7 @@ make mercure-jwt
 
 Copy the three printed values into the `PROD_ENV_FILE` secret.
 
-#### 5. First deploy
+#### 3. First deploy
 
 Trigger it by pushing the first tag:
 
@@ -265,7 +271,7 @@ git push origin v2026.01
 
 This writes `.env`, builds the Docker image, starts all services, runs migrations, and initialises the MinIO buckets automatically via `minio_init`.
 
-#### 6. Verify
+#### 4. Verify
 
 ```bash
 docker compose ps        # all services should be healthy/running

assets/css/_fontawesome-config.scss

@@ -7,9 +7,4 @@
  * file that was distributed with this source code.
  */
 
-$font-path: "/webfonts";
-
-@import '@fortawesome/fontawesome-free/scss/fontawesome';
-@import '@fortawesome/fontawesome-free/scss/brands';
-@import '@fortawesome/fontawesome-free/scss/solid';
-@import '@fortawesome/fontawesome-free/scss/regular';
+@import '@fortawesome/fontawesome-free/css/all.min.css';

assets/css/homepage/_auth-bar.scss

@@ -1,14 +1,15 @@
-.hero-auth {
-    position: absolute;
-    top: 28px;
-    right: 36px;
+#hero-auth {
+  padding: 20px;
+
+  .hero-auth {
     display: flex;
     align-items: center;
+    justify-content: flex-end;
     gap: 10px;
     z-index: 10;
-}
+  }
 
-.hero-auth-user {
+  .hero-auth-user {
     font: 600 13px 'Rajdhani', sans-serif;
     color: rgba(149, 207, 245, 0.75);
     letter-spacing: 0.5px;
@@ -17,6 +18,13 @@
     gap: 6px;
 
     i { font-size: 15px; }
+  }
+
+  @media screen and (max-width: 1100px) {
+    .hero-auth {
+      justify-content: center;
+    }
+  }
 }
 
 .hero-auth-btn {

assets/css/homepage/_auth.scss

@@ -180,6 +180,41 @@
     input[type="checkbox"] { accent-color: #236f87; }
 }
 
+.auth-checkbox {
+    accent-color: #236f87;
+    cursor: pointer;
+    width: 18px;
+    height: 18px;
+    flex-shrink: 0;
+}
+
+.auth-checkbox-label {
+    display: flex;
+    align-items: flex-start;
+    cursor: pointer;
+    user-select: none;
+    font: 400 14px 'Rajdhani', sans-serif;
+    color: rgba(255, 255, 255, 0.6);
+    line-height: 1.5;
+
+    a {
+        color: #95cff5;
+        text-decoration: none;
+        font-weight: 600;
+        transition: color 180ms;
+
+        &:hover { color: #c5e8ff; }
+    }
+}
+
+textarea.auth-input {
+    padding: 11px 14px;
+    min-height: 120px;
+    resize: vertical;
+    font-family: 'Rajdhani', sans-serif;
+    line-height: 1.5;
+}
+
 .auth-submit {
     display: flex;
     align-items: center;

assets/css/homepage/_content.scss

@@ -33,3 +33,11 @@ main div.txt a {
 
     &:hover { color: #c5e8ff; }
 }
+
+main div.txt img {
+  border-radius: 10px;
+}
+
+main div.txt .img-container {
+  text-align: center;
+}

assets/css/homepage/_donate.scss

@@ -0,0 +1,72 @@
+/*!*
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+.hero-donate-text {
+    position: relative;
+    z-index: 1;
+    font: 400 12px 'Rajdhani', sans-serif;
+    color: rgba(255, 255, 255, 0.5);
+    letter-spacing: 0.5px;
+    margin-top: 42px;
+    margin-bottom: 8px;
+    animation: rise 0.8s 0.5s cubic-bezier(0.22, 1, 0.36, 1) both;
+}
+
+.hero-donate {
+    position: relative;
+    display: inline-block;
+    font: 500 12px 'Rajdhani', sans-serif;
+    text-transform: uppercase;
+    letter-spacing: 1px;
+    text-decoration: none;
+    color: rgba(255, 184, 82, 0.75);
+    padding: 6px 14px;
+    border-radius: 2px;
+    border: 1px solid rgba(255, 184, 82, 0.25);
+
+    background: rgba(255, 140, 30, 0.05);
+
+    box-shadow:
+        0 0  0   1px rgba(255, 140, 30, 0.1),
+        0 0  8px    rgba(255, 140, 30, 0.08);
+
+    transition: transform 200ms ease, box-shadow 200ms ease, color 200ms ease, background 200ms ease;
+    animation: rise 0.8s 0.58s cubic-bezier(0.22, 1, 0.36, 1) both;
+}
+
+.hero-donate::before {
+    content: '';
+    position: absolute;
+    inset: -2px;
+    border-radius: 3px;
+    background: rgba(255, 140, 30, 0.15);
+    filter: blur(8px);
+    opacity: 0.1;
+    z-index: -1;
+    transition: opacity 200ms ease;
+}
+
+.hero-donate:hover {
+    transform: translateY(-1px);
+    color: rgba(255, 200, 100, 0.9);
+    background: rgba(255, 140, 30, 0.1);
+    box-shadow:
+        0 0  0   1px rgba(255, 140, 30, 0.2),
+        0 0  12px    rgba(255, 140, 30, 0.15);
+}
+
+.hero-donate:hover::before {
+    opacity: 0.2;
+}
+
+.hero-donate:active {
+    transform: translateY(0px);
+}
+
+

assets/css/homepage/_features.scss

@@ -45,33 +45,33 @@
     }
 
     // Bar chart — large, centre
-    i.fa-bar-chart {
-        font-size: 140px;
-        color: rgba(35, 111, 135, 0.35);
-        filter: drop-shadow(0 0 30px rgba(35, 111, 135, 0.3));
+    i.fa-chart-bar {
+        font-size: 160px;
+        color: rgba(35, 111, 135, 0.5);
+        filter: drop-shadow(0 0 40px rgba(35, 111, 135, 0.5));
     }
 
     // Trophy — top right
     i.fa-trophy {
-        font-size: 64px;
-        top: 12px;
-        right: 30px;
-        color: rgba(246, 125, 82, 0.5);
-        filter: drop-shadow(0 0 16px rgba(246, 125, 82, 0.25));
+        font-size: 80px;
+        top: 0px;
+        right: 20px;
+        color: rgba(246, 125, 82, 0.7);
+        filter: drop-shadow(0 0 25px rgba(246, 125, 82, 0.4));
     }
 
-    // History — bottom left
-    i.fa-history {
-        font-size: 52px;
-        bottom: 18px;
-        left: 30px;
-        color: rgba(149, 207, 245, 0.4);
-        filter: drop-shadow(0 0 12px rgba(149, 207, 245, 0.2));
+    // Clock history — bottom left
+    i.fa-clock-rotate-left {
+        font-size: 68px;
+        bottom: 0px;
+        left: 20px;
+        color: rgba(149, 207, 245, 0.65);
+        filter: drop-shadow(0 0 20px rgba(149, 207, 245, 0.35));
     }
 
-    &:hover i.fa-bar-chart { color: rgba(35, 111, 135, 0.6); }
-    &:hover i.fa-trophy     { color: rgba(246, 125, 82, 0.75); }
-    &:hover i.fa-history    { color: rgba(149, 207, 245, 0.65); }
+    &:hover i.fa-chart-bar { color: rgba(35, 111, 135, 0.8); filter: drop-shadow(0 0 50px rgba(35, 111, 135, 0.7)); }
+    &:hover i.fa-trophy     { color: rgba(246, 125, 82, 0.9); filter: drop-shadow(0 0 35px rgba(246, 125, 82, 0.6)); }
+    &:hover i.fa-clock-rotate-left { color: rgba(149, 207, 245, 0.9); filter: drop-shadow(0 0 30px rgba(149, 207, 245, 0.5)); }
 }
 
 // MSN visual
@@ -107,6 +107,98 @@
     }
 }
 
+// Privacy visual
+.feature-block__visual--privacy {
+    height: 260px;
+    gap: 0;
+
+    i {
+        position: absolute;
+        color: rgba(35, 111, 135, 0.5);
+        transition: color 300ms ease;
+    }
+
+    // Shield — centre, large
+    i.fa-shield {
+        font-size: 140px;
+        color: rgba(34, 197, 94, 0.3);
+        filter: drop-shadow(0 0 30px rgba(34, 197, 94, 0.25));
+    }
+
+    // Lock — top right
+    i.fa-lock {
+        font-size: 56px;
+        top: 20px;
+        right: 35px;
+        color: rgba(168, 85, 247, 0.5);
+        filter: drop-shadow(0 0 16px rgba(168, 85, 247, 0.2));
+    }
+
+    // Eye slash — bottom left
+    i.fa-eye-slash {
+        font-size: 48px;
+        bottom: 28px;
+        left: 40px;
+        color: rgba(59, 130, 246, 0.5);
+        filter: drop-shadow(0 0 12px rgba(59, 130, 246, 0.15));
+    }
+
+    &:hover i.fa-shield { color: rgba(34, 197, 94, 0.6); }
+    &:hover i.fa-lock     { color: rgba(168, 85, 247, 0.75); }
+    &:hover i.fa-eye-slash { color: rgba(59, 130, 246, 0.7); }
+}
+
+// Practice visual
+.feature-block__visual--practice {
+    height: 260px;
+    gap: 0;
+
+    i {
+        position: absolute;
+        color: rgba(35, 111, 135, 0.5);
+        transition: color 300ms ease;
+    }
+
+    // Laptop — centre, large
+    i.fa-laptop {
+        font-size: 140px;
+        color: rgba(251, 146, 60, 0.3);
+        filter: drop-shadow(0 0 30px rgba(251, 146, 60, 0.25));
+    }
+
+    // Linux — top left
+    i.fa-linux {
+        font-size: 48px;
+        top: 20px;
+        left: 35px;
+        color: rgba(245, 158, 11, 0.5);
+        filter: drop-shadow(0 0 16px rgba(245, 158, 11, 0.2));
+    }
+
+    // Apple — top right
+    i.fa-apple {
+        font-size: 56px;
+        top: 20px;
+        right: 35px;
+        color: rgba(156, 163, 175, 0.5);
+        filter: drop-shadow(0 0 16px rgba(156, 163, 175, 0.2));
+    }
+
+    // Windows — bottom left
+    i.fa-windows {
+        font-size: 48px;
+        bottom: 28px;
+        left: 40px;
+        color: rgba(59, 130, 246, 0.5);
+        filter: drop-shadow(0 0 12px rgba(59, 130, 246, 0.15));
+    }
+
+    &:hover i.fa-laptop { color: rgba(251, 146, 60, 0.6); }
+    &:hover i.fa-linux     { color: rgba(245, 158, 11, 0.75); }
+    &:hover i.fa-apple     { color: rgba(156, 163, 175, 0.75); }
+    &:hover i.fa-windows { color: rgba(59, 130, 246, 0.7); }
+}
+
 // Text side
 .feature-block__text {
     flex: 1;
@@ -161,6 +253,56 @@
     }
 }
 
+.practice-links {
+    display: flex;
+    flex-direction: column;
+    gap: 12px;
+    margin-top: 24px;
+}
+
+.practice-link {
+    display: inline-flex;
+    align-items: center;
+    gap: 12px;
+    font: 700 13px 'Rajdhani', sans-serif;
+    text-transform: uppercase;
+    letter-spacing: 1px;
+    text-decoration: none;
+    color: rgba(149, 207, 245, 0.85);
+    border: 1px solid rgba(59, 130, 246, 0.3);
+    background: rgba(59, 130, 246, 0.08);
+    padding: 10px 18px;
+    border-radius: 4px;
+    transition: all 200ms ease;
+    width: fit-content;
+
+    &:hover {
+        background: rgba(59, 130, 246, 0.2);
+        border-color: rgba(59, 130, 246, 0.6);
+        color: #fff;
+        transform: translateX(4px);
+        box-shadow: 0 4px 12px rgba(59, 130, 246, 0.2);
+    }
+}
+
+.practice-link-icon {
+    width: 40px;
+    height: 40px;
+    border-radius: 8px;
+    object-fit: contain;
+    background: rgba(255, 255, 255, 0.08);
+    padding: 4px;
+    border: 1px solid rgba(255, 255, 255, 0.1);
+    flex-shrink: 0;
+    transition: all 200ms ease;
+}
+
+.practice-link:hover .practice-link-icon {
+    background: rgba(59, 130, 246, 0.15);
+    border-color: rgba(59, 130, 246, 0.4);
+    transform: scale(1.05);
+}
+
 @media screen and (max-width: 900px) {
     .feature-block__inner,
     .feature-block--reverse .feature-block__inner {
@@ -199,4 +341,14 @@
     .feature-block {
         padding: 60px 24px;
     }
+
+    .practice-links {
+        justify-content: center;
+        align-items: center;
+    }
+
+    .practice-link {
+        width: 100%;
+        justify-content: center;
+    }
 }

assets/css/homepage/_footer.scss

@@ -14,7 +14,6 @@ footer {
     gap: 40px;
 }
 
-// Left: brand block
 .footer-brand {
     display: flex;
     flex-direction: column;
@@ -55,7 +54,6 @@ footer {
     line-height: 1.5;
 }
 
-// Right: navigation
 .footer-nav-label {
     font: 700 11px 'Rajdhani', sans-serif;
     text-transform: uppercase;
@@ -91,7 +89,6 @@ footer {
     }
 }
 
-// Bottom copyright bar
 .footer-copy {
     border-top: 1px solid rgba(255, 255, 255, 0.05);
     padding: 16px 60px;

assets/css/homepage/_profile.scss

@@ -747,6 +747,13 @@
   font: 800 24px 'Rajdhani', sans-serif;
   letter-spacing: 2px;
 
+  &__img {
+    width: 100%;
+    height: 100%;
+    border-radius: 50%;
+    object-fit: cover;
+  }
+
   &--red {
     background: linear-gradient(135deg, rgba(173, 10, 5, 0.6) 0%, rgba(246, 125, 82, 0.4) 100%);
     border: 2px solid rgba(173, 10, 5, 0.5);

assets/css/mineseeker/_base.scss

@@ -17,7 +17,6 @@ main {
 }
 
 .mine-container {
-    background: url("/images/bg-mineseeker-0-outbg.jpg") no-repeat;
     background-size: cover;
     display: flex;
     justify-content: center;

assets/css/mineseeker/_grid.scss

@@ -78,8 +78,6 @@
 }
 
 #mine-wrapper .grid .field-wrapper .field .field-corner {
-    background: url('/images/bg-corner-outbg.png') no-repeat top left;
-    background-size: 100%;
     width: 100%;
     height: 100%;
 }

assets/css/mineseeker/_overlay.scss

@@ -471,58 +471,122 @@
 }
 
 #mine-wrapper .game-wrapper .game-overlay .game-overlay-window .share-copy-btn {
-  display: inline-flex;
-  align-items: center;
-  justify-content: center;
-  gap: 9px;
-  background: linear-gradient(to bottom, #236f87 0%, #1a5068 100%);
-  border: 2px solid #2e7a9a;
-  color: #e0f4ff;
-  font-family: 'Rajdhani', sans-serif;
-  font-size: 13px;
-  font-weight: 800;
-  letter-spacing: 1px;
-  text-transform: uppercase;
-  padding: 12px 24px;
-  border-radius: 8px;
-  cursor: pointer;
-  transition: all 300ms cubic-bezier(0.34, 1.56, 0.64, 1);
-  width: 100%;
-  position: relative;
-  overflow: hidden;
-  box-shadow: 0 4px 12px rgba(35, 111, 135, 0.25);
+   display: inline-flex;
+   align-items: center;
+   justify-content: center;
+   gap: 9px;
+   background: linear-gradient(to bottom, #236f87 0%, #1a5068 100%);
+   border: 2px solid #2e7a9a;
+   color: #e0f4ff;
+   font-family: 'Rajdhani', sans-serif;
+   font-size: 13px;
+   font-weight: 800;
+   letter-spacing: 1px;
+   text-transform: uppercase;
+   padding: 12px 24px;
+   border-radius: 8px;
+   cursor: pointer;
+   transition: all 300ms cubic-bezier(0.34, 1.56, 0.64, 1);
+   width: 100%;
+   position: relative;
+   overflow: hidden;
+   box-shadow: 0 4px 12px rgba(35, 111, 135, 0.25);
 
-  &::before {
-    content: '';
-    position: absolute;
-    top: 0;
-    left: -100%;
-    width: 100%;
-    height: 100%;
-    background: linear-gradient(90deg, transparent, rgba(255, 255, 255, 0.2), transparent);
-    transition: left 0.4s ease;
-  }
+   &::before {
+     content: '';
+     position: absolute;
+     top: 0;
+     left: -100%;
+     width: 100%;
+     height: 100%;
+     background: linear-gradient(90deg, transparent, rgba(255, 255, 255, 0.2), transparent);
+     transition: left 0.4s ease;
+   }
 
-  &:hover {
-    background: linear-gradient(to bottom, #2d8aa8 0%, #236f87 100%);
-    border-color: #5ba4d4;
-    color: #fff;
-    box-shadow: 0 8px 24px rgba(35, 111, 135, 0.4);
-    transform: translateY(-2px);
+   &:hover {
+     background: linear-gradient(to bottom, #2d8aa8 0%, #236f87 100%);
+     border-color: #5ba4d4;
+     color: #fff;
+     box-shadow: 0 8px 24px rgba(35, 111, 135, 0.4);
+     transform: translateY(-2px);
 
-    &::before {
-      left: 100%;
-    }
-  }
+     &::before {
+       left: 100%;
+     }
+   }
 
-  &:active {
-    transform: translateY(0);
-  }
+   &:active {
+     transform: translateY(0);
+   }
 
-  &.copied {
-    background: linear-gradient(to bottom, #1a6844 0%, #135233 100%);
-    border-color: #2a9e60;
-    color: #a0f0c0;
-    box-shadow: 0 4px 12px rgba(26, 104, 68, 0.4);
-  }
+   &.copied {
+     background: linear-gradient(to bottom, #1a6844 0%, #135233 100%);
+     border-color: #2a9e60;
+     color: #a0f0c0;
+     box-shadow: 0 4px 12px rgba(26, 104, 68, 0.4);
+   }
 }
+
+#mine-wrapper .game-wrapper .game-overlay .game-overlay-window .game-overlay-share {
+   display: flex;
+   align-items: center;
+   justify-content: center;
+   gap: 9px;
+   background: linear-gradient(to bottom, #236f87 0%, #1a5068 100%);
+   border: 2px solid #2e7a9a;
+   color: #e0f4ff;
+   font-family: 'Rajdhani', sans-serif;
+   font-size: 13px;
+   font-weight: 800;
+   letter-spacing: 1px;
+   text-transform: uppercase;
+   padding: 12px 24px;
+   border-radius: 8px;
+   cursor: pointer;
+   transition: all 300ms cubic-bezier(0.34, 1.56, 0.64, 1);
+   width: 100%;
+   margin-top: 20px;
+   position: relative;
+   overflow: hidden;
+   box-shadow: 0 4px 12px rgba(35, 111, 135, 0.25);
+   z-index: 10;
+
+   &::before {
+     content: '';
+     position: absolute;
+     top: 0;
+     left: -100%;
+     width: 100%;
+     height: 100%;
+     background: linear-gradient(90deg, transparent, rgba(255, 255, 255, 0.2), transparent);
+     transition: left 0.4s ease;
+   }
+
+   &:hover {
+     background: linear-gradient(to bottom, #2d8aa8 0%, #236f87 100%);
+     border-color: #5ba4d4;
+     color: #fff;
+     box-shadow: 0 8px 24px rgba(35, 111, 135, 0.4);
+     transform: translateY(-2px);
+
+     &::before {
+       left: 100%;
+     }
+   }
+
+   &:active {
+     transform: translateY(0);
+   }
+
+   &.copied {
+     background: linear-gradient(to bottom, #1a6844 0%, #135233 100%);
+     border-color: #2a9e60;
+     color: #a0f0c0;
+     box-shadow: 0 4px 12px rgba(26, 104, 68, 0.4);
+   }
+
+   i {
+     font-size: 15px;
+   }
+}
+

assets/css/mineseeker/_waiting-dialog.scss

@@ -305,3 +305,43 @@
   padding-top: 14px;
   border-top: 1px solid rgba(35, 111, 135, 0.14);
 }
+
+.opd-header-actions {
+  .opd-refresh[disabled] {
+    opacity: 0.4;
+    cursor: not-allowed;
+  }
+
+  .opd-close[disabled] {
+    opacity: 0.4;
+    cursor: not-allowed;
+  }
+}
+
+.opd-waiting {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 14px 16px;
+  margin-bottom: 16px;
+  background: rgba(35, 111, 135, 0.07);
+  border: 1px solid rgba(35, 111, 135, 0.28);
+  border-radius: 8px;
+  color: #95cff5;
+
+  i {
+    font-size: 16px;
+    animation: opd-hourglass 1s ease-in-out infinite;
+  }
+
+  p {
+    margin: 0;
+    font: 600 14px 'Rajdhani', sans-serif;
+    letter-spacing: 0.5px;
+  }
+}
+
+@keyframes opd-hourglass {
+  0%, 100% { transform: rotate(0deg); }
+  50% { transform: rotate(180deg); }
+}

assets/css/style.homepage.scss

@@ -4,6 +4,7 @@
 @use 'homepage/hero';
 @use 'homepage/hero-compact';
 @use 'homepage/cta';
+@use 'homepage/donate';
 @use 'homepage/auth-bar';
 @use 'homepage/auth';
 @use 'homepage/content';

assets/css/style.layout.scss

@@ -320,7 +320,6 @@ footer nav ul li {
 }
 
 footer nav ul li:nth-child(even) {
-  width: 50px;
   text-align: center;
 }
 
@@ -401,8 +400,4 @@ footer nav ul li a:hover {
   footer nav ul li {
     display: block;
   }
-
-  footer nav ul li:nth-child(even) {
-    display: none;
-  }
 }

assets/js/components/BattleDialog.jsx

@@ -35,7 +35,7 @@ const RESULT_META = {
     icon: 'fa-trophy',
   },
   loss: {
-    label: 'Defeat',
+    label: 'Defeated',
     color: '#f67d52',
     bg: 'rgba(173,10,5,0.15)',
     border: 'rgba(173,10,5,0.4)',
@@ -50,7 +50,7 @@ const RESULT_META = {
   },
 };
 
-function Avatar({ name, color }) {
+function Avatar({ name, color, avatarUrl }) {
   const isRed = 'red' === color;
   const initials = (name || '?').slice(0, 2).toUpperCase();
 
@@ -69,16 +69,29 @@ function Avatar({ name, color }) {
     <div style={{ display: 'flex', flexDirection: 'column', alignItems: 'center', gap: 10 }}>
       <div style={{
         width: 72, height: 72, borderRadius: '50%',
-        background: gradient,
+        background: avatarUrl ? 'transparent' : gradient,
         border: `2px solid ${border}`,
         boxShadow: glow,
         display: 'flex', alignItems: 'center', justifyContent: 'center',
         font: '800 24px \'Rajdhani\', sans-serif',
         color: textColor,
         letterSpacing: 2,
+        overflow: 'hidden',
       }}
       >
-        {initials}
+        {avatarUrl ? (
+          <img
+            src={avatarUrl}
+            alt={name}
+            style={{
+              width: '100%',
+              height: '100%',
+              objectFit: 'cover',
+            }}
+          />
+        ) : (
+          initials
+        )}
       </div>
       <span style={{
         font: '700 15px \'Rajdhani\', sans-serif',
@@ -134,8 +147,8 @@ function StatRow({ icon, label, value, valueColor }) {
 }
 
 export default function BattleDialog({ games }) {
-  const [open, setOpen]     = useState(false);
-  const [game, setGame]     = useState(null);
+  const [open, setOpen] = useState(false);
+  const [game, setGame] = useState(null);
   const [copied, setCopied] = useState(false);
 
   useEffect(() => {
@@ -156,18 +169,18 @@ export default function BattleDialog({ games }) {
     return <ThemeProvider theme={darkTheme}><Dialog open={false} sx={DIALOG_SX} /></ThemeProvider>;
   }
 
-  const meta      = RESULT_META[game.result] ?? RESULT_META.draw;
-  const resign    = game.resign;
+  const meta = RESULT_META[game.result] ?? RESULT_META.draw;
+  const resign = game.resign;
   const endReason = resign
-      ? `${resign.charAt(0).toUpperCase() + resign.slice(1)} resigned`
-      : 'Points';
-  const shareUrl  = `${window.location.origin}/battle/${game.id}`;
+    ? `${resign.charAt(0).toUpperCase() + resign.slice(1)} resigned`
+    : 'Points';
+  const shareUrl = `${window.location.origin}/battle/${game.uuid}`;
 
   const handleShare = () => {
-      navigator.clipboard.writeText(shareUrl).then(() => {
-          setCopied(true);
-          setTimeout(() => setCopied(false), 2200);
-      });
+    navigator.clipboard.writeText(shareUrl).then(() => {
+      setCopied(true);
+      setTimeout(() => setCopied(false), 2200);
+    });
   };
 
   return (
@@ -197,7 +210,7 @@ export default function BattleDialog({ games }) {
             </div>
           </div>
           <div className="bd-vs-panel">
-            <Avatar name={game.redName} color="red" />
+            <Avatar name={game.redName} color="red" avatarUrl={game.redAvatar} />
             <div className="bd-vs-center">
               <div className="bd-vs-score">
                 <span className="bd-vs-score__red">{game.redPoints ?? '—'}</span>
@@ -212,7 +225,7 @@ export default function BattleDialog({ games }) {
                 <i className={`fa ${meta.icon}`} /> {meta.label}
               </div>
             </div>
-            <Avatar name={game.blueName} color="blue" />
+            <Avatar name={game.blueName} color="blue" avatarUrl={game.blueAvatar} />
           </div>
           <div className="bd-stats">
             <StatRow icon="fa-calendar" label="Date" value={game.date ?? '—'} />

assets/js/components/ContactForm.jsx

@@ -0,0 +1,83 @@
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+import { useEffect, useRef } from 'react';
+
+/**
+ * ContactForm Component
+ *
+ * Handles reCAPTCHA v3 integration for the contact form.
+ * Intercepts form submission, executes reCAPTCHA, and submits the form with the token.
+ *
+ * @param {string} siteKey - Google reCAPTCHA site key
+ * @param {string} recaptchaFieldId - ID of the hidden recaptcha input field
+ */
+const ContactForm = ({ siteKey, recaptchaFieldId }) => {
+  const formRef = useRef(null);
+  const isSubmittingRef = useRef(false);
+
+  useEffect(() => {
+    const form = document.querySelector('.auth-form');
+
+    if (!form) {
+      console.warn('ContactForm: No .auth-form found');
+      return;
+    }
+
+    formRef.current = form;
+
+    const handleSubmit = e => {
+      e.preventDefault();
+
+      if (isSubmittingRef.current) {
+        return;
+      }
+
+      isSubmittingRef.current = true;
+
+      if ('undefined' !== typeof grecaptcha) {
+        grecaptcha.ready(() => {
+          grecaptcha
+            .execute(siteKey, { action: 'contact' })
+            .then(token => {
+              const recaptchaField = document.getElementById(recaptchaFieldId);
+
+              if (recaptchaField) {
+                recaptchaField.value = token;
+              } else {
+                console.error(`ContactForm: Recaptcha field with ID "${recaptchaFieldId}" not found`);
+              }
+
+              isSubmittingRef.current = false;
+              form.submit();
+            })
+            .catch(error => {
+              console.error('ContactForm: reCAPTCHA execution failed', error);
+              isSubmittingRef.current = false;
+            });
+        });
+      } else {
+        console.error('ContactForm: grecaptcha is not loaded');
+        isSubmittingRef.current = false;
+      }
+    };
+
+    form.addEventListener('submit', handleSubmit);
+
+    return () => {
+      if (formRef.current) {
+        formRef.current.removeEventListener('submit', handleSubmit);
+      }
+    };
+  }, [siteKey, recaptchaFieldId]);
+
+  return null;
+};
+
+export default ContactForm;

assets/js/contact.jsx

@@ -0,0 +1,31 @@
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+import React from 'react';
+import { createRoot } from 'react-dom/client';
+import ContactForm from './components/ContactForm';
+
+const wrapper = document.getElementById('contact-form-wrapper');
+
+if (wrapper) {
+  const siteKey = wrapper.dataset.siteKey;
+  const recaptchaFieldId = wrapper.dataset.recaptchaFieldId;
+
+  if (siteKey && recaptchaFieldId) {
+    createRoot(wrapper).render(
+      <ContactForm
+        siteKey={siteKey}
+        recaptchaFieldId={recaptchaFieldId}
+      />
+    );
+  } else {
+    console.error('ContactForm: Missing siteKey or recaptchaFieldId in data attributes');
+  }
+}
+

assets/js/mine-seeker/components/CaptchaOverlay.jsx

@@ -0,0 +1,169 @@
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+import React, { useEffect, useState } from 'react';
+
+const CAPTCHA_STORAGE_KEY = 'mineseeker_captcha_verified';
+const CAPTCHA_TOKEN_KEY = 'mineseeker_captcha_token';
+const RECAPTCHA_ACTION = 'mineseeker_play';
+
+const CaptchaOverlay = ({ siteKey, onVerified, children }) => {
+  const [verified, setVerified] = useState(false);
+  const [loading, setLoading] = useState(false);
+  const [error, setError] = useState(false);
+
+  useEffect(() => {
+    const storedToken = sessionStorage.getItem(CAPTCHA_TOKEN_KEY);
+    const storedTime = sessionStorage.getItem(CAPTCHA_STORAGE_KEY);
+
+    if (storedToken && storedTime) {
+      const elapsed = (Date.now() - parseInt(storedTime)) / 1000;
+      if (110 > elapsed) {
+        const wrapper = document.getElementById('mine-wrapper');
+        if (wrapper) {
+          wrapper.dataset.captchaToken = storedToken;
+        }
+        setVerified(true);
+        onVerified?.();
+        return;
+      }
+    }
+
+    if (window.grecaptcha) {
+      window.grecaptcha.ready(() => {
+        window.grecaptcha
+          .execute(siteKey, { action: RECAPTCHA_ACTION })
+          .then(token => {
+            handleToken(token);
+          })
+          .catch(() => {
+            setError(true);
+          });
+      });
+    }
+  }, [siteKey, onVerified]);
+
+  const handleToken = token => {
+    const wrapper = document.getElementById('mine-wrapper');
+    if (wrapper) {
+      wrapper.dataset.captchaToken = token;
+    }
+    sessionStorage.setItem(CAPTCHA_TOKEN_KEY, token);
+    sessionStorage.setItem(CAPTCHA_STORAGE_KEY, Date.now().toString());
+    setVerified(true);
+    onVerified?.();
+  };
+
+  const handleClick = () => {
+    setLoading(true);
+    setError(false);
+
+    window.grecaptcha.ready(() => {
+      window.grecaptcha
+        .execute(siteKey, { action: RECAPTCHA_ACTION })
+        .then(token => {
+          handleToken(token);
+          setLoading(false);
+        })
+        .catch(() => {
+          setLoading(false);
+          setError(true);
+          setTimeout(() => setError(false), 2000);
+        });
+    });
+  };
+
+  if (verified) {
+    return <>{children}</>;
+  }
+
+  const overlayStyles = {
+    position: 'fixed',
+    top: 0,
+    left: 0,
+    width: '100%',
+    height: '100%',
+    background: 'rgba(7, 9, 13, 0.95)',
+    backdropFilter: 'blur(8px)',
+    display: 'flex',
+    alignItems: 'center',
+    justifyContent: 'center',
+    zIndex: 1000,
+  };
+
+  const contentStyles = {
+    textAlign: 'center',
+    color: '#fff',
+    maxWidth: '400px',
+    padding: '40px',
+  };
+
+  const iconStyles = {
+    fontSize: '64px',
+    color: '#236f87',
+    marginBottom: '24px',
+  };
+
+  const h1Styles = {
+    font: '800 32px Rajdhani, sans-serif',
+    margin: '0 0 16px',
+    letterSpacing: '1px',
+  };
+
+  const pStyles = {
+    color: 'rgba(149, 207, 245, 0.7)',
+    font: '400 16px Rajdhani, sans-serif',
+    margin: '0 0 32px',
+    letterSpacing: '0.5px',
+  };
+
+  const buttonStyles = {
+    background: error
+      ? 'linear-gradient(#8a2323 0%, #681a1a 100%)'
+      : loading
+        ? 'linear-gradient(#236f87 0%, #1a5068 100%)'
+        : 'linear-gradient(#236f87 0%, #1a5068 100%)',
+    border: `2px solid ${error ? '#9a2e2e' : loading ? '#2e7a9a' : '#2e7a9a'}`,
+    borderRadius: '8px',
+    color: '#e0f4ff',
+    cursor: loading ? 'wait' : 'pointer',
+    font: '800 18px Rajdhani, sans-serif',
+    letterSpacing: '2px',
+    padding: '16px 40px',
+    textTransform: 'uppercase',
+    transition: 'all 0.3s ease',
+    display: 'inline-flex',
+    alignItems: 'center',
+    gap: '12px',
+    opacity: loading ? 0.7 : 1,
+  };
+
+  return (
+    <div style={overlayStyles}>
+      <div style={contentStyles}>
+        <div style={iconStyles}>
+          <i className="fa fa-shield-halved" />
+        </div>
+        <h1 style={h1Styles}>Ready to Play?</h1>
+        <p style={pStyles}>
+          Click below to verify you&apos;re human and start playing.
+        </p>
+        <button
+          style={buttonStyles}
+          onClick={handleClick}
+          disabled={loading}
+        >
+          <i className={`fa ${loading ? 'fa-spinner fa-spin' : error ? 'fa-exclamation-circle' : 'fa-play'}`} />
+          {loading ? 'Verifying...' : error ? 'Try Again' : 'Start Playing'}
+        </button>
+      </div>
+    </div>
+  );
+};
+
+export default CaptchaOverlay;

assets/js/mine-seeker/components/ChallengeCountdown.jsx

@@ -0,0 +1,41 @@
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+import { Fragment, useEffect, useState } from 'react';
+
+const ChallengeCountdown = ({ onAccept, onDecline, seconds = 30 }) => {
+  const [countdown, setCountdown] = useState(seconds);
+
+  useEffect(() => {
+    const interval = setInterval(() => {
+      setCountdown(prev => {
+        if (1 >= prev) {
+          clearInterval(interval);
+          onDecline();
+          return 0;
+        }
+        return prev - 1;
+      });
+    }, 1000);
+    return () => clearInterval(interval);
+  }, [onDecline]);
+
+  return (
+    <Fragment>
+      <p style={{ textAlign: 'center', marginBottom: 20, color: '#95cff5' }}>
+        You have {countdown} second{1 === countdown ? '' : 's'} to answer to the challenge!
+      </p>
+      <div className="resign">
+        <a onClick={onAccept}>Accept</a>
+        <a onClick={onDecline}>Decline</a>
+      </div>
+    </Fragment>
+  );
+};
+
+export default ChallengeCountdown;

assets/js/mine-seeker/components/GameBoard.jsx

@@ -26,6 +26,7 @@ export const GameBoard = ({ gameAssoc, gameInherited, isEnvDev }) => {
 
   return (
     <GridControl
+      gameAssoc={gameAssoc}
       onClick={onClick}
       resign={resign}
     />

assets/js/mine-seeker/components/OnlinePlayersDialog.jsx

@@ -47,6 +47,7 @@ const OnlinePlayersDialog = ({ open, onClose, currentGameAssoc }) => {
   const [snapshotLoaded, setSnapshotLoaded] = useState(false);
   const [challengingGameAssoc, setChallengingGameAssoc] = useState(null);
   const [declinedMsg, setDeclinedMsg] = useState('');
+  const [waitingCountdown, setWaitingCountdown] = useState(0);
   const declinedTimerRef = useRef(null);
 
   const addPlayer = useCallback(entry => {
@@ -111,6 +112,7 @@ const OnlinePlayersDialog = ({ open, onClose, currentGameAssoc }) => {
       setChallengingGameAssoc(null);
       clearTimeout(declinedTimerRef.current);
       setDeclinedMsg('Challenge was not accepted.');
+      setWaitingCountdown(0);
       declinedTimerRef.current = setTimeout(() => setDeclinedMsg(''), 3500);
     };
     window.addEventListener('challenge-declined', handler);
@@ -120,15 +122,30 @@ const OnlinePlayersDialog = ({ open, onClose, currentGameAssoc }) => {
     };
   }, []);
 
+  useEffect(() => {
+    if (!waitingCountdown) return;
+    const interval = setInterval(() => {
+      setWaitingCountdown(prev => {
+        if (1 >= prev) return 0;
+        return prev - 1;
+      });
+    }, 1000);
+    return () => clearInterval(interval);
+  }, [waitingCountdown]);
+
   const handleChallenge = player => {
     if (challengingGameAssoc) return;
     setChallengingGameAssoc(player.gameAssoc);
     setDeclinedMsg('');
+    setWaitingCountdown(30);
     fetch('/api/game/challenge/' + player.gameAssoc, {
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },
       body: JSON.stringify({ challengerGameAssoc: currentGameAssoc }),
-    }).catch(() => setChallengingGameAssoc(null));
+    }).catch(() => {
+      setChallengingGameAssoc(null);
+      setWaitingCountdown(0);
+    });
   };
 
   const visible = players
@@ -147,7 +164,12 @@ const OnlinePlayersDialog = ({ open, onClose, currentGameAssoc }) => {
   }
 
   return (
-    <Dialog open={open} onClose={onClose} sx={DIALOG_SX}>
+    <Dialog 
+      open={open} 
+      onClose={0 < waitingCountdown ? undefined : onClose} 
+      disableEscapeKeyDown={0 < waitingCountdown}
+      sx={DIALOG_SX}
+    >
       <div className="opd">
         <div className="opd-header">
           <div className="opd-header-text">
@@ -160,32 +182,44 @@ const OnlinePlayersDialog = ({ open, onClose, currentGameAssoc }) => {
           <div className="opd-header-actions">
             <button
               className={`opd-refresh${loading ? ' opd-refresh--spin' : ''}`}
-              onClick={() => setRefreshKey(k => k + 1)}
-              disabled={loading}
+              onClick={() => { if (0 === waitingCountdown) setRefreshKey(k => k + 1); }}
+              disabled={loading || 0 < waitingCountdown}
               aria-label="Refresh"
               title="Refresh list"
             >
               <i className="fa fa-refresh" />
             </button>
-            <button className="opd-close" onClick={onClose} aria-label="Close">
+            <button 
+              className="opd-close" 
+              onClick={() => { if (0 === waitingCountdown) onClose(); }} 
+              disabled={0 < waitingCountdown}
+              aria-label="Close"
+            >
               <i className="fa fa-times" />
             </button>
           </div>
         </div>
-        <div className="opd-search-wrap">
-          <i className="fa fa-search opd-search-icon" />
-          <input
-            className="opd-search"
-            placeholder="Search by username…"
-            value={search}
-            onChange={e => setSearch(e.target.value)}
-          />
-          {search && (
-            <button className="opd-search-clear" onClick={() => setSearch('')}>
-              <i className="fa fa-times" />
-            </button>
-          )}
-        </div>
+        {0 < waitingCountdown ? (
+          <div className="opd-waiting">
+            <i className="fa fa-hourglass-start" />
+            <p>Waiting {waitingCountdown} second{1 === waitingCountdown ? '' : 's'} for opponent's answer...</p>
+          </div>
+        ) : (
+          <div className="opd-search-wrap">
+            <i className="fa fa-search opd-search-icon" />
+            <input
+              className="opd-search"
+              placeholder="Search by username…"
+              value={search}
+              onChange={e => setSearch(e.target.value)}
+            />
+            {search && (
+              <button className="opd-search-clear" onClick={() => setSearch('')}>
+                <i className="fa fa-times" />
+              </button>
+            )}
+          </div>
+        )}
         <div className="opd-list">
           {loading && (
             <div className="opd-empty">

assets/js/mine-seeker/components/grid/GridControl.jsx

@@ -7,20 +7,31 @@
  * file that was distributed with this source code.
  */
 
-import React, { Fragment } from 'react';
+import React, { Fragment, useState } from 'react';
 import { useGame } from '@mine-contexts';
 import GridField from './GridField';
 import UserControl from '../user/UserControl';
 import GameTimer from '../GameTimer';
 import { BOMB_SYMBOLS, bombRadius } from '@mine-utils';
 
-const GridControl = ({ onClick, resign }) => {
+const GridControl = ({ gameAssoc, onClick, resign }) => {
   const {
     overlay, overlayTitle, overlaySubTitle,
     webPlayer, activePlayer, bombSelected,
-    cells, setCells,
+    cells, setCells, endRef,
   } = useGame();
 
+  const [copied, setCopied] = useState(false);
+  const shareUrl = gameAssoc ? `${window.location.origin}/battle/${gameAssoc}` : null;
+
+  const handleShare = () => {
+    if (!shareUrl) return;
+    navigator.clipboard.writeText(shareUrl).then(() => {
+      setCopied(true);
+      setTimeout(() => setCopied(false), 2200);
+    });
+  };
+
   const handleHover = (row, col) => {
     if (!bombSelected) return;
     const activeColor = activePlayer ? 'blue' : 'red';
@@ -47,7 +58,22 @@ const GridControl = ({ onClick, resign }) => {
         <div className={`game-overlay${overlay ? '' : ' hide'}`}>
           <div className="game-overlay-window">
             <h1>{overlayTitle}</h1>
-            <h2>{overlaySubTitle}</h2>
+            {'string' === typeof overlaySubTitle ? (
+              <h2>{overlaySubTitle}</h2>
+            ) : (
+              overlaySubTitle
+            )}
+            {gameAssoc && endRef.current && (
+              <button
+                className={`game-overlay-share${copied ? ' copied' : ''}`}
+                onClick={handleShare}
+                title="Copy share link"
+                aria-label="Copy share link"
+              >
+                <i className={`fa ${copied ? 'fa-check' : 'fa-share-alt'}`} />
+                {copied ? 'Copied!' : 'Share Battle'}
+              </button>
+            )}
           </div>
         </div>
         <UserControl

assets/js/mine-seeker/components/grid/GridField.jsx

@@ -53,7 +53,10 @@ const GridField = memo(function GridField({ cell, onClick, onMouseEnter }) {
         />
       )}
       <div className={fieldClass}>
-        <div className="field-corner">
+        <div
+          style={{ background: "url('/images/bg-corner-outbg.png') no-repeat top left / 100% 100%" }}
+          className="field-corner"
+        >
           {isNaN(currentImage) && (
             <div className="flag-mine">
               <img src={currentImage} alt="" />

assets/js/mine-seeker/components/index.js

@@ -10,6 +10,7 @@
 export { GameBoard } from './GameBoard';
 export { default as OnlinePlayersDialog } from './OnlinePlayersDialog';
 export { default as WaitingOverlayContent } from './WaitingOverlayContent';
+export { default as ChallengeCountdown } from './ChallengeCountdown';
 export { default as GameTimer } from './GameTimer';
 export { default as GridControl } from './grid/GridControl';
 export { default as GridField } from './grid/GridField';

assets/js/mine-seeker/contexts/GameProvider.jsx

@@ -41,6 +41,8 @@ export const GameProvider = ({ children }) => {
     connectionLost, setConnectionLost,
   } = useGameState();
 
+  const [gameUuid, setGameUuid] = React.useState(null);
+
   const sounds = useRef({
     click: new Howl({ src: ['/sound/click.mp3'] }),
     bomb: new Howl({ src: ['/sound/bomb.mp3'] }),
@@ -202,8 +204,11 @@ export const GameProvider = ({ children }) => {
     }
   };
 
-  const resignProcess = color => {
+  const resignProcess = (color, uuid = null) => {
     const wp = webPlayerRef.current;
+    if (uuid) {
+      setGameUuid(uuid);
+    }
     showOverlay(
       color === wp ? 'You have been give up' : 'Your opponent has been resigned',
       color === wp ? 'You LOSE!' : 'You WIN!',
@@ -225,9 +230,9 @@ export const GameProvider = ({ children }) => {
       value={{
         // State (for rendering)
         webPlayer, activePlayer, overlay, overlayTitle, overlaySubTitle,
-        mines, bombSelected, foundMines, red, blue, cells, gridReady, connectionLost,
+        mines, bombSelected, foundMines, red, blue, cells, gridReady, connectionLost, gameUuid,
         // Setters needed by useServerComm
-        setCells, setGridReady,
+        setCells, setGridReady, setGameUuid,
         // Refs (needed by useServerComm for async-safe reads)
         webPlayerRef, activePlayerRef, bombSelectedRef, connectionLostRef, endRef,
         // Sync helpers

assets/js/mine-seeker/hooks/useServerCommunication.jsx

@@ -14,13 +14,14 @@ import { DESC } from '@mine-utils';
 import useStepTimer from './useStepTimer';
 import { WaitingOverlayContent } from '@mine-components';
 
-/** Handles all server communication: SSE (Mercure), REST calls, and the initialization lifecycle. */
+import { ChallengeCountdown } from '@mine-components';
+
 const useServerCommunication = (gameAssoc, gameInherited, isEnvDev) => {
   const {
     /** Async-safe refs */
     webPlayerRef, activePlayerRef, bombSelectedRef, connectionLostRef, endRef,
     /** State setters */
-    setGridReady,
+    setGridReady, setGameUuid,
     /** Sync helpers */
     syncWebPlayer, syncActivePlayer, syncBombSelected, syncConnLost, syncRed, syncBlue,
     /** Game logic */
@@ -136,8 +137,10 @@ const useServerCommunication = (gameAssoc, gameInherited, isEnvDev) => {
 
   const wChallenge = payload => {
     const { challengerName, challengerGameAssoc } = payload;
+    let declineTimeout = null;
 
     const handleAccept = () => {
+      clearTimeout(declineTimeout);
       fetch('/api/game/challenge/respond/' + challengerGameAssoc, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
@@ -148,6 +151,7 @@ const useServerCommunication = (gameAssoc, gameInherited, isEnvDev) => {
     };
 
     const handleDecline = () => {
+      clearTimeout(declineTimeout);
       fetch('/api/game/challenge/respond/' + challengerGameAssoc, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
@@ -162,12 +166,11 @@ const useServerCommunication = (gameAssoc, gameInherited, isEnvDev) => {
       }).catch(() => {});
     };
 
+    declineTimeout = setTimeout(handleDecline, 30000);
+
     showOverlay(
       challengerName + ' wants to challenge you!',
-      <div className="resign">
-        <a onClick={handleAccept}>Accept</a>
-        <a onClick={handleDecline}>Decline</a>
-      </div>,
+      <ChallengeCountdown onAccept={handleAccept} onDecline={handleDecline} />,
     );
   };
 
@@ -193,9 +196,12 @@ const useServerCommunication = (gameAssoc, gameInherited, isEnvDev) => {
         }
 
         applyStep(payload.data);
+        if (payload.data.uuid && !endRef.current) {
+          setGameUuid(payload.data.uuid);
+        }
         makeGameEndIfItEnds(payload.data.bluePoints, payload.data.redPoints, false, payload.data.leftMines);
       } else {
-        resignProcess(payload.data.resign);
+        resignProcess(payload.data.resign, payload.data.uuid);
       }
     }
   };
@@ -312,6 +318,9 @@ const useServerCommunication = (gameAssoc, gameInherited, isEnvDev) => {
     try {
       const result = await stepMutation.mutateAsync(dataPack);
       applyStep(result);
+      if (result.uuid && !endRef.current) {
+        setGameUuid(result.uuid);
+      }
       makeGameEndIfItEnds(result.bluePoints, result.redPoints, false, result.leftMines);
     } catch (e) {
       isEnvDev && console.error('Step error', e);
@@ -321,8 +330,16 @@ const useServerCommunication = (gameAssoc, gameInherited, isEnvDev) => {
   const clickResign = () => {
     const color = activePlayerRef.current ? 'blue' : 'red';
     const stepElapsed = getStepElapsed(activePlayerRef.current, isGameRunningRef.current);
-    stepMutation.mutate({ resign: color, stepElapsed });
-    resignProcess(webPlayerRef.current);
+    stepMutation.mutate(
+      { resign: color, stepElapsed },
+      {
+        onSuccess: result => {
+          if (result?.uuid && !endRef.current) {
+            resignProcess(webPlayerRef.current, result.uuid);
+          }
+        },
+      }
+    );
   };
 
   const resign = () => {

compose.yaml

@@ -11,6 +11,8 @@ services:
       SERVER_NAME: ${SERVER_NAME:-:80}
       APP_ENV: prod
       APP_SECRET: ${APP_SECRET}
+      APP_PUBLIC_HOSTNAME: ${APP_PUBLIC_HOSTNAME:-localhost}
+      APP_CONTACT_MAIL_ADDRESS: ${APP_CONTACT_MAIL_ADDRESS:-7system7@gmail.com}
       DATABASE_URL: >-
         postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB}?serverVersion=${POSTGRES_VERSION}&charset=utf8
       POSTGRES_URL: db
@@ -31,6 +33,11 @@ services:
       MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
       MINIO_ENDPOINT: http://minio:9000
       MINIO_PUBLIC_URL: ${MINIO_PUBLIC_URL:-http://localhost:9000}
+      # IMPORTANT: Set TRUSTED_PROXIES to your reverse proxy IP in production.
+      # For Docker on same host, use: 172.17.0.1 (default bridge) or 172.16.0.0/12 (overlay network)
+      # For Kubernetes or external proxy, use the proxy's IP address.
+      # WARNING: Using 0.0.0.0/0 is insecure in production environments!
+      TRUSTED_PROXIES: ${TRUSTED_PROXIES:-127.0.0.1}
     volumes:
       - app_var:/app/var
       - caddy_data:/data
@@ -88,6 +95,7 @@ services:
       RELAYHOST_PASSWORD: ${MAIL_RELAYHOST_PASSWORD:-}
     volumes:
       - postfix_spool:/var/spool/postfix
+      - ./docker/aliases:/tmp/aliases:ro
   db:
     image: postgres:${POSTGRES_VERSION:-18}-alpine
     restart: unless-stopped
@@ -113,3 +121,5 @@ volumes:
   caddy_config:
   postfix_spool:
   minio_data:
+
+

composer.json

@@ -1,94 +1,103 @@
 {
-    "type": "project",
-    "license": "proprietary",
-    "require": {
-        "php": ">=8.5",
-        "ext-iconv": "*",
-        "ext-json": "*",
-        "doctrine/dbal": "^3.7",
-        "doctrine/doctrine-bundle": ">=2.11 <2.14",
-        "doctrine/doctrine-migrations-bundle": "^3.0",
-        "doctrine/orm": "^2.6",
-        "endroid/qr-code": "^6.1",
-        "league/flysystem-aws-s3-v3": "^3.0",
-        "league/flysystem-bundle": "^3.6",
-        "liip/imagine-bundle": "^2.13",
-        "pentatrion/vite-bundle": "^8.2",
-        "scheb/2fa-backup-code": "^8.5",
-        "scheb/2fa-bundle": "^8.5",
-        "scheb/2fa-totp": "^8.5",
-        "symfony/console": "7.4.*",
-        "symfony/flex": "^2.10.0",
-        "symfony/form": "7.4.*",
-        "symfony/framework-bundle": "7.4.*",
-        "symfony/http-client": "7.4.*",
-        "symfony/mailer": "7.4.*",
-        "symfony/mercure": "^0.6",
-        "symfony/mercure-bundle": "*",
-        "symfony/monolog-bundle": "^3.8",
-        "symfony/security-bundle": "7.4.*",
-        "symfony/translation": "7.4.*",
-        "symfony/twig-bundle": "7.4.*",
-        "symfony/validator": "7.4.*",
-        "symfony/yaml": "7.4.*",
-        "web-auth/webauthn-framework": "^5.2"
+  "name": "splendid-bear/mineseeker",
+  "version": "2026.2.1",
+  "license": "GPL-3.0-or-later",
+  "author": "https://www.splendidbear.org",
+  "bugs": "https://source.splendidbear.org",
+  "description": "This is a minesweeper game that is inspired from MSN Messenger's game.",
+  "minimum-stability": "dev",
+  "type": "project",
+  "prefer-stable": true,
+  "private": true,
+  "require": {
+    "php": ">=8.5",
+    "ext-iconv": "*",
+    "ext-json": "*",
+    "ext-gd": "*",
+    "doctrine/dbal": "^3.7",
+    "doctrine/doctrine-bundle": ">=2.11 <2.14",
+    "doctrine/doctrine-migrations-bundle": "^3.0",
+    "doctrine/orm": "^2.6",
+    "endroid/qr-code": "^6.1",
+    "league/flysystem-aws-s3-v3": "^3.0",
+    "league/flysystem-bundle": "^3.6",
+    "liip/imagine-bundle": "^2.13",
+    "pentatrion/vite-bundle": "^8.2",
+    "scheb/2fa-backup-code": "^8.5",
+    "scheb/2fa-bundle": "^8.5",
+    "scheb/2fa-totp": "^8.5",
+    "symfony/console": "7.4.*",
+    "symfony/flex": "^2.10.0",
+    "symfony/form": "7.4.*",
+    "symfony/framework-bundle": "7.4.*",
+    "symfony/http-client": "7.4.*",
+    "symfony/mailer": "7.4.*",
+    "symfony/mercure": "^0.6",
+    "symfony/mercure-bundle": "*",
+    "symfony/monolog-bundle": "^3.8",
+    "symfony/security-bundle": "7.4.*",
+    "symfony/translation": "7.4.*",
+    "symfony/twig-bundle": "7.4.*",
+    "symfony/validator": "7.4.*",
+    "symfony/yaml": "7.4.*",
+    "web-auth/webauthn-framework": "^5.2"
+  },
+  "require-dev": {
+    "firebase/php-jwt": "^7.0",
+    "roave/security-advisories": "dev-master",
+    "symfony/dotenv": "7.4.*",
+    "symfony/maker-bundle": "^1.5",
+    "symfony/stopwatch": "7.4.*",
+    "symfony/web-profiler-bundle": "7.4.*"
+  },
+  "config": {
+    "preferred-install": {
+      "*": "dist"
     },
-    "require-dev": {
-        "firebase/php-jwt": "^7.0",
-        "roave/security-advisories": "dev-master",
-        "symfony/dotenv": "7.4.*",
-        "symfony/maker-bundle": "^1.5",
-        "symfony/stopwatch": "7.4.*",
-        "symfony/web-profiler-bundle": "7.4.*"
-    },
-    "config": {
-        "preferred-install": {
-            "*": "dist"
-        },
-        "sort-packages": true,
-        "allow-plugins": {
-            "symfony/flex": true
-        }
-    },
-    "autoload": {
-        "psr-4": {
-            "App\\": "src/"
-        }
-    },
-    "autoload-dev": {
-        "psr-4": {
-            "App\\Tests\\": "tests/"
-        }
-    },
-    "replace": {
-        "symfony/polyfill-iconv": "*",
-        "symfony/polyfill-ctype": "*",
-        "symfony/polyfill-php73": "*",
-        "symfony/polyfill-php72": "*",
-        "symfony/polyfill-php71": "*",
-        "symfony/polyfill-php70": "*",
-        "symfony/polyfill-php56": "*"
-    },
-    "scripts": {
-        "auto-scripts": {
-            "cache:clear": "symfony-cmd",
-            "assets:install --symlink --relative %PUBLIC_DIR%": "symfony-cmd"
-        },
-        "post-install-cmd": [
-            "@auto-scripts"
-        ],
-        "post-update-cmd": [
-            "@auto-scripts"
-        ]
-    },
-    "conflict": {
-        "symfony/symfony": "*",
-        "doctrine/persistence": "<1.3"
-    },
-    "extra": {
-        "symfony": {
-            "allow-contrib": false,
-            "require": "7.4.*"
-        }
+    "sort-packages": true,
+    "allow-plugins": {
+      "symfony/flex": true
     }
+  },
+  "autoload": {
+    "psr-4": {
+      "App\\": "src/"
+    }
+  },
+  "autoload-dev": {
+    "psr-4": {
+      "App\\Tests\\": "tests/"
+    }
+  },
+  "replace": {
+    "symfony/polyfill-iconv": "*",
+    "symfony/polyfill-ctype": "*",
+    "symfony/polyfill-php73": "*",
+    "symfony/polyfill-php72": "*",
+    "symfony/polyfill-php71": "*",
+    "symfony/polyfill-php70": "*",
+    "symfony/polyfill-php56": "*"
+  },
+  "scripts": {
+    "auto-scripts": {
+      "cache:clear": "symfony-cmd",
+      "assets:install --symlink --relative %PUBLIC_DIR%": "symfony-cmd"
+    },
+    "post-install-cmd": [
+      "@auto-scripts"
+    ],
+    "post-update-cmd": [
+      "@auto-scripts"
+    ]
+  },
+  "conflict": {
+    "symfony/symfony": "*",
+    "doctrine/persistence": "<1.3"
+  },
+  "extra": {
+    "symfony": {
+      "allow-contrib": false,
+      "require": "7.4.*"
+    }
+  }
 }

config/packages/framework.yaml

@@ -8,6 +8,13 @@ framework:
   session:
     handler_id: ~
 
+  # Trust headers from reverse proxy (Caddy)
+  # This ensures absolute_url() uses HTTPS scheme when behind a reverse proxy
+  # Production: TRUSTED_PROXIES from .env (Gitea secret)
+  # Development: TRUSTED_PROXIES from compose.override.yaml
+  trusted_proxies: '%env(TRUSTED_PROXIES)%'
+  trusted_headers: ['x-forwarded-for', 'x-forwarded-proto', 'x-forwarded-host', 'x-forwarded-port']
+
   #esi: true
   #fragments: true
   php_errors:

config/packages/prod/framework.yaml

@@ -0,0 +1,8 @@
+framework:
+  # In production with FrankenPHP, the reverse proxy (Caddy) is in the same container
+  # Requests come from 127.0.0.1, so we must trust that IP to process X-Forwarded-Proto headers
+  # TRUSTED_PROXIES is set in the .env file (stored in Gitea secrets)
+  # Typical value for Docker: 172.18.0.0/16 (or the specific Docker network CIDR)
+  # This must be provided by the PROD_ENV_FILE secret in Gitea
+  trusted_proxies: '%env(TRUSTED_PROXIES)%'
+  trusted_headers: ['x-forwarded-for', 'x-forwarded-proto', 'x-forwarded-host', 'x-forwarded-port']

config/packages/security.yaml

@@ -23,12 +23,14 @@ security:
         auth_code_parameter_name: _auth_code
         post_only: true
         default_target_path: MineSeekerBundle_homepage
+        always_use_default_target_path: false
         prepare_on_login: true
         prepare_on_access_denied: true
       form_login:
         login_path: MineSeekerBundle_login
         check_path: MineSeekerBundle_login
         default_target_path: MineSeekerBundle_homepage
+        always_use_default_target_path: false
         username_parameter: _username
         password_parameter: _password
         enable_csrf: true

config/services.yaml

@@ -25,6 +25,11 @@ services:
     resource: '../src/Controller'
     tags: [ 'controller.service_arguments' ]
 
+  App\Service\BattleCardGenerator:
+    arguments:
+      $cacheDir: '%kernel.project_dir%/var/og-cache'
+      $minioMediaStorage: '@mineseeker.media.storage'
+
   Aws\S3\S3Client:
     arguments:
       - version: 'latest'

docker/aliases

@@ -0,0 +1,5 @@
+# Postfix aliases file
+# Mail addressed to system users are redirected to this address
+postmaster: root
+root: root
+

package.json

@@ -1,50 +1,51 @@
 {
-    "name": "mine-seeker",
-    "version": "1.0.0",
-    "description": "Mine Seeker Game by system7",
-    "keywords": [
-        "mine",
-        "seeker",
-        "game",
-        "multiplayer",
-        "websocket"
-    ],
-    "author": "Laszlo Lang <system7>",
-    "license": "UNLICENSED",
-    "private": true,
-    "dependencies": {
-        "@emotion/react": "^11.14.0",
-        "@emotion/styled": "^11.14.1",
-        "@fontsource/changa-one": "^5.2.8",
-        "@fontsource/open-sans": "^5.2.7",
-        "@fontsource/rajdhani": "^5.2.7",
-        "@fortawesome/fontawesome-free": "^7.2.0",
-        "@mui/material": "^9.0.0",
-        "@mui/x-charts": "^9.0.1",
-        "@tanstack/react-query": "^5.0.0",
-        "howler": "^2.1.2",
-        "lodash": "^4.18.1",
-        "prop-types": "^15.7.2",
-        "react": "^19.0.0",
-        "react-dom": "^19.0.0"
-    },
-    "devDependencies": {
-        "@eslint/eslintrc": "^3.3.5",
-        "@eslint/js": "^9.0.0",
-        "@stylistic/eslint-plugin": "^4.0.0",
-        "@vitejs/plugin-react": "^6.0.1",
-        "eslint": "^9.0.0",
-        "eslint-plugin-react": "^7.0.0",
-        "eslint-plugin-react-hooks": "^5.0.0",
-        "globals": "^15.0.0",
-        "sass": "^1.77.0",
-        "vite": "^8.0.8",
-        "vite-plugin-symfony": "^8.2.4"
-    },
-    "scripts": {
-        "dev": "vite",
-        "watch": "vite build --watch",
-        "build": "vite build && cp -r node_modules/@fortawesome/fontawesome-free/webfonts public/build/webfonts",
-        "lint": "eslint assets/js/"
-    }
+  "name": "mine-seeker",
+  "version": "2026.2.1",
+  "author": "https://www.splendidbear.org",
+  "license": "GPL-3.0-or-later",
+  "bugs": "https://source.splendidbear.org",
+  "description": "Mine Seeker Game by system7",
+  "private": true,
+  "keywords": [
+    "mine",
+    "seeker",
+    "game",
+    "multiplayer",
+    "websocket"
+  ],
+  "dependencies": {
+    "@emotion/react": "^11.14.0",
+    "@emotion/styled": "^11.14.1",
+    "@fontsource/changa-one": "^5.2.8",
+    "@fontsource/open-sans": "^5.2.7",
+    "@fontsource/rajdhani": "^5.2.7",
+    "@fortawesome/fontawesome-free": "^7.2.0",
+    "@mui/material": "^9.0.0",
+    "@mui/x-charts": "^9.0.1",
+    "@tanstack/react-query": "^5.0.0",
+    "howler": "^2.1.2",
+    "lodash": "^4.18.1",
+    "prop-types": "^15.7.2",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
+  },
+  "devDependencies": {
+    "@eslint/eslintrc": "^3.3.5",
+    "@eslint/js": "^9.0.0",
+    "@stylistic/eslint-plugin": "^4.0.0",
+    "@vitejs/plugin-react": "^6.0.1",
+    "eslint": "^9.0.0",
+    "eslint-plugin-react": "^7.0.0",
+    "eslint-plugin-react-hooks": "^5.0.0",
+    "globals": "^15.0.0",
+    "sass": "^1.77.0",
+    "vite": "^8.0.8",
+    "vite-plugin-symfony": "^8.2.4"
+  },
+  "scripts": {
+    "dev": "vite",
+    "watch": "vite build --watch",
+    "build": "vite build",
+    "lint": "eslint assets/js/"
+  }
 }

public/index.php

@@ -25,7 +25,7 @@ if ($debug) {
 }
 
 if ($trustedProxies = $_SERVER['TRUSTED_PROXIES'] ?? false) {
-    Request::setTrustedProxies(explode(',', $trustedProxies), Request::HEADER_X_FORWARDED_ALL ^ Request::HEADER_X_FORWARDED_HOST);
+    Request::setTrustedProxies(explode(',', $trustedProxies), Request::HEADER_X_FORWARDED_FOR | Request::HEADER_X_FORWARDED_HOST | Request::HEADER_X_FORWARDED_PROTO);
 }
 
 if ($trustedHosts = $_SERVER['TRUSTED_HOSTS'] ?? false) {

src/Controller/GameController.php

@@ -10,10 +10,19 @@
 
 namespace App\Controller;
 
+use App\Entity\ContactMessage;
+use App\Form\ContactFormType;
+use Doctrine\ORM\EntityManagerInterface;
+use Psr\Log\LoggerInterface;
+use RuntimeException;
+use Symfony\Bridge\Twig\Mime\TemplatedEmail;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
 use Symfony\Component\DependencyInjection\Attribute\Autowire;
+use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\HttpKernel\Attribute\AsController;
+use Symfony\Component\Mailer\Exception\TransportExceptionInterface;
+use Symfony\Component\Mailer\MailerInterface;
 use Symfony\Component\Routing\Attribute\Route;
 
 /**
@@ -31,11 +40,14 @@ class GameController extends AbstractController
 {
     public function __construct(
         #[Autowire(env: 'APP_ENV')]
-        private readonly string $env,
+        private readonly string          $env,
         #[Autowire(env: 'MERCURE_PUBLIC_URL')]
-        private readonly string $mercurePublicUrl,
+        private readonly string          $mercurePublicUrl,
         #[Autowire(env: 'MERCURE_SUBSCRIBER_JWT')]
-        private readonly string $mercureSubscriberJwt,
+        private readonly string          $mercureSubscriberJwt,
+        #[Autowire(env: 'APP_CONTACT_MAIL_ADDRESS')]
+        private readonly string          $appContactMailAddress,
+        private readonly LoggerInterface $logger,
     ) {
     }
 
@@ -69,9 +81,28 @@ class GameController extends AbstractController
     }
 
     #[Route('/contact', name: 'MineSeekerBundle_contact')]
-    public function contact(): Response
-    {
-        return $this->render('Official/contact.html.twig');
+    public function contact(
+        Request                $request,
+        EntityManagerInterface $em,
+        MailerInterface        $mailer,
+    ): Response {
+        $contactMessage = new ContactMessage();
+        $form = $this->createForm(ContactFormType::class, $contactMessage);
+        $form->handleRequest($request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            $contactMessage->setIpAddress($request->getClientIp());
+            $em->persist($contactMessage);
+            $em->flush();
+            $this->sendMail($mailer, $contactMessage);
+            $this->addFlash('contact_success', 'Thank you for your message! We will get back to you soon.');
+
+            return $this->redirectToRoute('MineSeekerBundle_contact');
+        }
+
+        return $this->render('Official/contact.html.twig', [
+            'form' => $form,
+        ]);
     }
 
     #[Route('/landing-page', name: 'MineSeekerBundle_landing')]
@@ -79,4 +110,37 @@ class GameController extends AbstractController
     {
         return $this->render('Official/landing.html.twig');
     }
+
+    #[Route('/rules', name: 'MineSeekerBundle_rules')]
+    public function rules(): Response
+    {
+        return $this->render('Official/rules.html.twig');
+    }
+
+    public function sendMail(MailerInterface $mailer, ContactMessage $contactMessage): void
+    {
+        try {
+            $mailer->send(
+                new TemplatedEmail()
+                    ->from('noreply@mineseeker.hu')
+                    ->to($this->appContactMailAddress)
+                    ->replyTo($contactMessage->getEmail())
+                    ->subject('New Contact Message from ' . $contactMessage->getName())
+                    ->htmlTemplate('emails/contact_notification.html.twig')
+                    ->context(['message' => $contactMessage])
+            );
+        } catch (\Exception $e) {
+            $this->logger->error('Failed to send contact notification email: ' . $e->getMessage(), [
+                'exception' => $e,
+                'message'   => $contactMessage,
+            ]);
+            throw new RuntimeException('Failed to send contact notification email: ' . $e->getMessage());
+        } catch (TransportExceptionInterface $e) {
+            $this->logger->error('Failed to send contact notification email: ' . $e->getMessage(), [
+                'exception' => $e,
+                'message'   => $contactMessage,
+            ]);
+            throw new RuntimeException('Failed to send contact notification email: ' . $e->getMessage());
+        }
+    }
 }

src/Controller/MercureController.php

@@ -64,7 +64,7 @@ class MercureController extends AbstractController
     #[Route('/api/game/join/{gameAssoc}', name: 'MineSeekerBundle_api_game_join', methods: ['POST'])]
     public function join(string $gameAssoc, Request $request): JsonResponse
     {
-        $this->topicManager->subscribe($gameAssoc, $this->resolveUserName($request), $this->getUser());
+        $this->topicManager->subscribe($gameAssoc, $this->resolveUserName($request), $this->getUser(), $request);
 
         return $this->json(['success' => true]);
     }

src/Controller/ProfileController.php

@@ -10,20 +10,31 @@
 
 namespace App\Controller;
 
+use App\Entity\PlayedGame;
 use App\Entity\User;
 use App\Repository\PlayedGameRepository;
+use App\Service\BattleCardGenerator;
 use App\Service\WebAuthnService;
+use DateTime;
 use Doctrine\ORM\EntityManagerInterface;
+use League\Flysystem\FilesystemException;
 use League\Flysystem\FilesystemOperator;
 use Liip\ImagineBundle\Imagine\Cache\CacheManager;
+use Psr\Log\LoggerInterface;
+use RuntimeException;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
 use Symfony\Component\DependencyInjection\Attribute\Autowire;
+use Symfony\Component\HttpFoundation\BinaryFileResponse;
 use Symfony\Component\HttpFoundation\File\UploadedFile;
 use Symfony\Component\HttpFoundation\JsonResponse;
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\HttpFoundation\ResponseHeaderBag;
 use Symfony\Component\HttpKernel\Attribute\AsController;
 use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Uid\Uuid;
+use Throwable;
+use function count;
 
 /**
  * Class ProfileController
@@ -40,12 +51,13 @@ class ProfileController extends AbstractController
 {
     public function __construct(
         private readonly PlayedGameRepository $repo,
-        private readonly WebAuthnService      $webAuthnService
+        private readonly WebAuthnService      $webAuthnService,
+        private readonly LoggerInterface      $logger,
     ) {
     }
 
     #[Route('/profile', name: 'MineSeekerBundle_profile')]
-    public function index(): Response
+    public function index(CacheManager $cacheManager): Response
     {
         /** @var User $user */
         $user = $this->getUser();
@@ -56,15 +68,15 @@ class ProfileController extends AbstractController
         $losses = $this->repo->countLossesForUser($user);
         $draws = $this->repo->countDrawsForUser($user);
 
-        // Build monthly buckets for the last 6 months
+        /** Build monthly buckets for the last 6 months */
         $monthlyData = [];
         for ($i = 5; $i >= 0; $i--) {
-            $dt = new \DateTime("first day of -$i months midnight");
+            $dt = new DateTime("first day of -$i months midnight");
             $key = $dt->format('Y-m');
             $monthlyData[$key] = ['label' => $dt->format('M'), 'wins' => 0, 'losses' => 0, 'draws' => 0];
         }
 
-        $since = new \DateTime('first day of -5 months midnight');
+        $since = new DateTime('first day of -5 months midnight');
         $recentGames = $this->repo->findFinishedForUserSince($user, $since);
         $userId = $user->getId();
 
@@ -112,7 +124,7 @@ class ProfileController extends AbstractController
                 'bestScore' => $this->repo->findBestScoreForUser($user),
             ],
             'recent'    => ($recent = $this->repo->findRecentFinishedForUser($user)),
-            'gamesData' => array_map(static function (\App\Entity\PlayedGame $game) use ($userId): array {
+            'gamesData' => array_map(function (PlayedGame $game) use ($userId, $cacheManager): array {
                 $isRed = $game->getRed()?->getId() === $userId;
                 $resign = $game->getResign();
                 $myColor = $isRed ? 'red' : 'blue';
@@ -128,12 +140,18 @@ class ProfileController extends AbstractController
                     elseif ($myPts < $oppPts) $result = 'loss';
                 }
 
+                $redAvatarPath = $game->getRed()?->getAvatarPath();
+                $blueAvatarPath = $game->getBlue()?->getAvatarPath();
+
                 return [
                     'id'               => $game->getId(),
+                    'uuid'             => $game->getUuid()?->toRfc4122(),
                     'redName'          =>
                         $game->getRed()?->getUsername() ?? $game->getRedAnon()?->getUserName() ?? 'Guest',
                     'blueName'         =>
                         $game->getBlue()?->getUsername() ?? $game->getBlueAnon()?->getUserName() ?? 'Guest',
+                    'redAvatar'        => $redAvatarPath ? $cacheManager->generateUrl($redAvatarPath, 'avatar_thumb') : null,
+                    'blueAvatar'       => $blueAvatarPath ? $cacheManager->generateUrl($blueAvatarPath, 'avatar_thumb') : null,
                     'redPoints'        => $game->getRedPoints(),
                     'bluePoints'       => $game->getBluePoints(),
                     'redExplodedBomb'  => $game->getRedExplodedBomb(),
@@ -159,19 +177,26 @@ class ProfileController extends AbstractController
         ]);
     }
 
-    #[Route('/battle/{id}', name: 'MineSeekerBundle_battle_share', requirements: ['id' => '\d+'], methods: ['GET'])]
-    public function battleShare(int $id): Response
+    #[Route(
+        '/battle/{uuid}',
+        name: 'MineSeekerBundle_battle_share',
+        requirements: ['uuid' => '[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}'],
+        methods: ['GET'],
+    )]
+    public function battleShare(Uuid $uuid): Response
     {
-        $game = $this->repo->find($id);
+        $game = $this->repo->findOneBy(['uuid' => $uuid]);
         if (!$game) {
             throw $this->createNotFoundException('Battle not found.');
         }
 
-        $redName = $game->getRed()?->getUsername() ?? $game->getRedAnon()?->getUserName() ?? 'Guest';
-        $blueName = $game->getBlue()?->getUsername() ?? $game->getBlueAnon()?->getUserName() ?? 'Guest';
+        $redName = $game->getRed()?->getUsername() ?? ($game->getRedAnon() !== null ? 'Anonymous' : 'Guest');
+        $blueName = $game->getBlue()?->getUsername() ?? ($game->getBlueAnon() !== null ? 'Anonymous' : 'Guest');
         $redPts = $game->getRedPoints();
         $bluePts = $game->getBluePoints();
         $resign = $game->getResign();
+        $redAvatar = $game->getRed()?->getAvatarPath();
+        $blueAvatar = $game->getBlue()?->getAvatarPath();
 
         if ($resign === 'red') {
             $summary = "$redName resigned — $blueName wins";
@@ -190,17 +215,42 @@ class ProfileController extends AbstractController
         }
 
         return $this->render('Game/battle_share.html.twig', [
-            'game'     => $game,
-            'redName'  => $redName,
-            'blueName' => $blueName,
-            'redPts'   => $redPts,
-            'bluePts'  => $bluePts,
-            'resign'   => $resign,
-            'ogTitle'  => "MineSeeker · $summary",
-            'ogDesc'   => "Watch the battle replay: $summary — played on MineSeeker, the multiplayer minesweeper.",
+            'game'       => $game,
+            'redName'    => $redName,
+            'blueName'   => $blueName,
+            'redPts'     => $redPts,
+            'bluePts'    => $bluePts,
+            'resign'     => $resign,
+            'redAvatar'  => $redAvatar,
+            'blueAvatar' => $blueAvatar,
+            'ogTitle'    => "MineSeeker · $summary",
+            'ogDesc'     => "Watch the battle replay: $summary — played on MineSeeker, the multiplayer minesweeper.",
         ]);
     }
 
+    #[Route(
+        '/og/battle/{uuid}.png',
+        name: 'MineSeekerBundle_og_battle',
+        requirements: ['uuid' => '[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}'],
+        methods: ['GET'],
+    )]
+    public function battleOgImage(Uuid $uuid, BattleCardGenerator $generator): BinaryFileResponse
+    {
+        $game = $this->repo->findOneBy(['uuid' => $uuid]);
+        if (!$game) {
+            throw $this->createNotFoundException();
+        }
+
+        $path = $generator->generate($game);
+        $response = new BinaryFileResponse($path);
+        $response->headers->set('Content-Type', 'image/png');
+        $response->setContentDisposition(ResponseHeaderBag::DISPOSITION_INLINE);
+        $response->setMaxAge(86400 * 30);
+        $response->setPublic();
+
+        return $response;
+    }
+
     #[Route('/profile/avatar', name: 'MineSeekerBundle_profile_avatar', methods: ['POST'])]
     public function uploadAvatar(
         Request                                                             $request,
@@ -228,23 +278,27 @@ class ProfileController extends AbstractController
         }
 
         $ext = $file->guessExtension() ?? 'jpg';
-        $newPath = sprintf('avatar/%d.%s', $user->getId(), $ext);
+        $newPath = sprintf('avatar/%s.%s', Uuid::v4()->toRfc4122(), $ext);
         $oldPath = $user->getAvatarPath();
 
-        // Remove old file and any cached thumbnails
+        /** Remove old file and any cached thumbnails */
         if ($oldPath) {
-            if ($oldPath !== $newPath) {
-                try {
-                    $mediaStorage->delete($oldPath);
-                } catch (\Throwable) {
-                }
+            try {
+                $mediaStorage->delete($oldPath);
+            } catch (Throwable) {
+                $this->logger->error('Unable to delete old avatar: ' . $oldPath);
             }
             $cacheManager->remove($oldPath, 'avatar_thumb');
         }
 
-        // Upload original to MinIO media/avatar/
-        $stream = fopen($file->getPathname(), 'r');
-        $mediaStorage->writeStream($newPath, $stream);
+        /** Upload original to MinIO media/avatar/ */
+        $stream = fopen($file->getPathname(), 'rb');
+        try {
+            $mediaStorage->writeStream($newPath, $stream);
+        } catch (FilesystemException $e) {
+            $this->logger->error('Unable to write new avatar: ' . $e->getMessage());
+            throw new RuntimeException('Unable to write new avatar: ' . $e->getMessage());
+        }
         fclose($stream);
 
         $user->setAvatarPath($newPath);
@@ -275,7 +329,7 @@ class ProfileController extends AbstractController
         return $this->render('Security/profile_security.html.twig', [
             'credentials'      => $credentialsData,
             'isTotpEnabled'    => $user->isTotpAuthenticationEnabled(),
-            'backupCodesCount' => \count($user->getBackupCodes()),
+            'backupCodesCount' => count($user->getBackupCodes()),
         ]);
     }
 }

src/Controller/SecurityController.php

@@ -17,8 +17,10 @@ use App\Form\ResetPasswordFormType;
 use App\Repository\UserRepository;
 use DateTime;
 use Doctrine\ORM\EntityManagerInterface;
+use LogicException;
 use Symfony\Bridge\Twig\Mime\TemplatedEmail;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\DependencyInjection\Attribute\Autowire;
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\HttpKernel\Attribute\AsController;
@@ -41,6 +43,12 @@ use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
 #[AsController]
 class SecurityController extends AbstractController
 {
+    public function __construct(
+        #[Autowire(env: 'APP_CONTACT_MAIL_ADDRESS')]
+        private readonly string $appContactMailAddress,
+    ) {
+    }
+
     #[Route('/login', name: 'MineSeekerBundle_login')]
     public function login(AuthenticationUtils $authenticationUtils): Response
     {
@@ -57,7 +65,7 @@ class SecurityController extends AbstractController
     #[Route('/logout', name: 'MineSeekerBundle_logout', methods: ['POST'])]
     public function logout(): never
     {
-        throw new \LogicException('This action is intercepted by the security firewall.');
+        throw new LogicException('This action is intercepted by the security firewall.');
     }
 
     #[Route('/register', name: 'MineSeekerBundle_register')]
@@ -92,6 +100,11 @@ class SecurityController extends AbstractController
                 UrlGeneratorInterface::ABSOLUTE_URL,
             );
 
+            /** Ensure HTTPS scheme in production */
+            if ($this->getParameter('kernel.environment') === 'prod') {
+                $activationUrl = str_replace('http://', 'https://', $activationUrl);
+            }
+
             $mailer->send(
                 new TemplatedEmail()
                     ->from('noreply@mineseeker.hu')
@@ -104,6 +117,19 @@ class SecurityController extends AbstractController
                     ])
             );
 
+            /** Send admin notification about new user registration */
+            $mailer->send(
+                new TemplatedEmail()
+                    ->from('noreply@mineseeker.hu')
+                    ->to($this->appContactMailAddress)
+                    ->subject('🎉 New User Registration: ' . $user->getUsername())
+                    ->htmlTemplate('emails/user_registration_notification.html.twig')
+                    ->context([
+                        'user'         => $user,
+                        'registeredAt' => new DateTime(),
+                    ])
+            );
+
             $this->addFlash('verify_email', $user->getEmail());
 
             return $this->redirectToRoute('MineSeekerBundle_register');
@@ -143,6 +169,11 @@ class SecurityController extends AbstractController
                     UrlGeneratorInterface::ABSOLUTE_URL,
                 );
 
+                /** Ensure HTTPS scheme in production */
+                if ($this->getParameter('kernel.environment') === 'prod') {
+                    $resetUrl = str_replace('http://', 'https://', $resetUrl);
+                }
+
                 $mailer->send(
                     new TemplatedEmail()
                         ->from('noreply@mineseeker.hu')
@@ -199,7 +230,7 @@ class SecurityController extends AbstractController
     }
 
     #[Route('/activate/{token}', name: 'MineSeekerBundle_activate')]
-    public function activate(string $token, EntityManagerInterface $em): Response
+    public function activate(string $token, EntityManagerInterface $em, MailerInterface $mailer): Response
     {
         $user = $em->getRepository(User::class)->findOneBy(['verificationToken' => $token]);
 
@@ -211,6 +242,19 @@ class SecurityController extends AbstractController
         $user->setIsVerified(true)->setVerificationToken(null);
         $em->flush();
 
+        /** Send admin notification about account activation */
+        $mailer->send(
+            new TemplatedEmail()
+                ->from('noreply@mineseeker.hu')
+                ->to($this->appContactMailAddress)
+                ->subject('✅ User Account Activated: ' . $user->getUsername())
+                ->htmlTemplate('emails/user_activation_notification.html.twig')
+                ->context([
+                    'user'        => $user,
+                    'activatedAt' => new DateTime(),
+                ])
+        );
+
         $this->addFlash('success', 'Your account is now active. Welcome, ' . $user->getUsername() . '!');
 
         return $this->redirectToRoute('MineSeekerBundle_login');

src/Entity/ContactMessage.php

@@ -0,0 +1,128 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Entity;
+
+use App\Repository\ContactMessageRepository;
+use DateTimeImmutable;
+use Doctrine\DBAL\Types\Types;
+use Doctrine\ORM\Mapping\Column;
+use Doctrine\ORM\Mapping\Entity;
+use Doctrine\ORM\Mapping\GeneratedValue;
+use Doctrine\ORM\Mapping\Id;
+use Doctrine\ORM\Mapping\Table;
+
+/**
+ * Class ContactMessage
+ *
+ * @package  App\Entity
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 15.
+ */
+#[Entity(repositoryClass: ContactMessageRepository::class)]
+#[Table(name: 'contact_messages')]
+class ContactMessage
+{
+    #[Id, GeneratedValue, Column]
+    private ?int $id = null;
+
+    #[Column]
+    private string $name;
+
+    #[Column]
+    private string $email;
+
+    #[Column(type: Types::TEXT)]
+    private string $content;
+
+    #[Column]
+    private bool $consent = false;
+
+    #[Column]
+    private DateTimeImmutable $createdAt;
+
+    #[Column(length: 45, nullable: true)]
+    private ?string $ipAddress = null;
+
+
+    public function __construct()
+    {
+        $this->createdAt = new DateTimeImmutable();
+    }
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getName(): string
+    {
+        return $this->name;
+    }
+
+    public function setName(string $name): self
+    {
+        $this->name = $name;
+        return $this;
+    }
+
+    public function getEmail(): string
+    {
+        return $this->email;
+    }
+
+    public function setEmail(string $email): self
+    {
+        $this->email = $email;
+        return $this;
+    }
+
+    public function getContent(): string
+    {
+        return $this->content;
+    }
+
+    public function setContent(string $content): self
+    {
+        $this->content = $content;
+        return $this;
+    }
+
+    public function isConsent(): bool
+    {
+        return $this->consent;
+    }
+
+    public function setConsent(bool $consent): self
+    {
+        $this->consent = $consent;
+        return $this;
+    }
+
+    public function getCreatedAt(): DateTimeImmutable
+    {
+        return $this->createdAt;
+    }
+
+    public function getIpAddress(): ?string
+    {
+        return $this->ipAddress;
+    }
+
+    public function setIpAddress(?string $ipAddress): self
+    {
+        $this->ipAddress = $ipAddress;
+        return $this;
+    }
+}
+

src/Entity/PlayedGame.php

@@ -23,6 +23,7 @@ use Doctrine\ORM\Mapping\JoinColumn;
 use Doctrine\ORM\Mapping\ManyToOne;
 use Doctrine\ORM\Mapping\OneToMany;
 use Doctrine\ORM\Mapping\OneToOne;
+use Symfony\Component\Uid\Uuid;
 
 /**
  * Class PlayedGame
@@ -40,6 +41,9 @@ class PlayedGame
     #[Id, GeneratedValue, Column]
     private ?int $id = null;
 
+    #[Column(type: 'uuid', unique: true)]
+    private ?Uuid $uuid = null;
+
     #[Column(length: 50)]
     private ?string $gameAssoc = null;
 
@@ -90,6 +94,7 @@ class PlayedGame
     public function __construct()
     {
         $this->steps = new ArrayCollection();
+        $this->uuid = Uuid::v4();
     }
 
     public function getId(): ?int
@@ -97,6 +102,16 @@ class PlayedGame
         return $this->id;
     }
 
+    public function getUuid(): ?Uuid
+    {
+        return $this->uuid;
+    }
+
+    public function setUuid(?Uuid $uuid): void
+    {
+        $this->uuid = $uuid;
+    }
+
     public function getGameAssoc(): ?string
     {
         return $this->gameAssoc;

src/Entity/User.php

@@ -78,6 +78,9 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface, TotpTwo
     #[Column(length: 255, nullable: true)]
     private ?string $avatarPath = null;
 
+    #[Column(nullable: true)]
+    private ?bool $consentGiven = null;
+
 
     public function getId(): ?int
     {
@@ -243,4 +246,15 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface, TotpTwo
         $this->backupCodes = $backupCodes;
         return $this;
     }
+
+    public function isConsentGiven(): ?bool
+    {
+        return $this->consentGiven;
+    }
+
+    public function setConsentGiven(?bool $consentGiven): self
+    {
+        $this->consentGiven = $consentGiven;
+        return $this;
+    }
 }

src/Form/ContactFormType.php

@@ -0,0 +1,89 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Form;
+
+use App\Entity\ContactMessage;
+use Symfony\Component\Form\AbstractType;
+use Symfony\Component\Form\Extension\Core\Type\CheckboxType;
+use Symfony\Component\Form\Extension\Core\Type\EmailType;
+use Symfony\Component\Form\Extension\Core\Type\TextareaType;
+use Symfony\Component\Form\Extension\Core\Type\TextType;
+use Symfony\Component\Form\FormBuilderInterface;
+use Symfony\Component\OptionsResolver\OptionsResolver;
+use Symfony\Component\Validator\Constraints\Email;
+use Symfony\Component\Validator\Constraints\IsTrue;
+use Symfony\Component\Validator\Constraints\Length;
+use Symfony\Component\Validator\Constraints\NotBlank;
+
+/**
+ * Class ContactFormType
+ *
+ * @package  App\Form
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 15.
+ */
+class ContactFormType extends AbstractType
+{
+    public function buildForm(FormBuilderInterface $builder, array $options): void
+    {
+        $builder
+            ->add('name', TextType::class, [
+                'label' => 'Name',
+                'constraints' => [
+                    new NotBlank(message: 'Please enter your name.'),
+                    new Length(
+                        min: 2,
+                        max: 255,
+                        minMessage: 'Name must be at least {{ limit }} characters.',
+                        maxMessage: 'Name cannot be longer than {{ limit }} characters.',
+                    ),
+                ],
+            ])
+            ->add('email', EmailType::class, [
+                'label' => 'Email',
+                'constraints' => [
+                    new NotBlank(message: 'Please enter your email address.'),
+                    new Email(message: 'Please enter a valid email address.'),
+                ],
+            ])
+            ->add('content', TextareaType::class, [
+                'label' => 'Message',
+                'constraints' => [
+                    new NotBlank(message: 'Please enter your message.'),
+                    new Length(
+                        min: 10,
+                        max: 5000,
+                        minMessage: 'Message must be at least {{ limit }} characters.',
+                        maxMessage: 'Message cannot be longer than {{ limit }} characters.',
+                    ),
+                ],
+            ])
+            ->add('consent', CheckboxType::class, [
+                'label' => 'I have read the Privacy and Data Processing Policy and I consent to the processing of my data.',
+                'mapped' => true,
+                'constraints' => [
+                    new IsTrue(message: 'You must agree to the privacy policy to submit this form.'),
+                ],
+            ])
+            ->add('recaptcha', RecaptchaType::class);
+    }
+
+    public function configureOptions(OptionsResolver $resolver): void
+    {
+        $resolver->setDefaults([
+            'data_class' => ContactMessage::class,
+        ]);
+    }
+}
+

src/Form/RegistrationFormType.php

@@ -12,6 +12,7 @@ namespace App\Form;
 
 use App\Entity\User;
 use Symfony\Component\Form\AbstractType;
+use Symfony\Component\Form\Extension\Core\Type\CheckboxType;
 use Symfony\Component\Form\Extension\Core\Type\EmailType;
 use Symfony\Component\Form\Extension\Core\Type\PasswordType;
 use Symfony\Component\Form\Extension\Core\Type\RepeatedType;
@@ -19,6 +20,7 @@ use Symfony\Component\Form\Extension\Core\Type\TextType;
 use Symfony\Component\Form\FormBuilderInterface;
 use Symfony\Component\OptionsResolver\OptionsResolver;
 use Symfony\Component\Validator\Constraints\Email;
+use Symfony\Component\Validator\Constraints\IsTrue;
 use Symfony\Component\Validator\Constraints\Length;
 use Symfony\Component\Validator\Constraints\NotBlank;
 
@@ -68,6 +70,13 @@ class RegistrationFormType extends AbstractType
                     ),
                 ],
             ])
+            ->add('consentGiven', CheckboxType::class, [
+                'label' => 'I have read the Privacy and Data Processing Policy and I consent to the processing of my data.',
+                'mapped' => true,
+                'constraints' => [
+                    new IsTrue(message: 'You must agree to the privacy policy to create an account.'),
+                ],
+            ])
             ->add('recaptcha', RecaptchaType::class);
     }
 

src/Interfaces/TopicManagerInterface.php

@@ -10,6 +10,7 @@
 
 namespace App\Interfaces;
 
+use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\Security\Core\User\UserInterface;
 
 /**
@@ -24,7 +25,7 @@ use Symfony\Component\Security\Core\User\UserInterface;
  */
 interface TopicManagerInterface
 {
-    public function subscribe(string $gameAssoc, string $userName, ?UserInterface $user): void;
+    public function subscribe(string $gameAssoc, string $userName, ?UserInterface $user, Request $request): void;
 
     public function unSubscribe(string $gameAssoc, string $userName): void;
 

src/Migrations/2026/04/Version20260414000000.php

@@ -0,0 +1,47 @@
+<?php declare(strict_types=1);
+/*
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Migrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+/**
+ * Class Version20260414000000
+ *
+ * @package  App\Migrations
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 14.
+ */
+final class Version20260414000000 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Add uuid column to played_game for shareable URLs';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE played_game ADD uuid UUID DEFAULT NULL');
+        $this->addSql('UPDATE played_game SET uuid = gen_random_uuid() WHERE uuid IS NULL');
+        $this->addSql('ALTER TABLE played_game ADD CONSTRAINT played_game_uuid_unique UNIQUE (uuid)');
+        $this->addSql('ALTER TABLE played_game ALTER COLUMN uuid SET NOT NULL');
+        $this->addSql('COMMENT ON COLUMN played_game.uuid IS \'(DC2Type:uuid)\'');
+    }
+
+    public function down(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE played_game DROP uuid');
+    }
+}
+

src/Migrations/2026/04/Version20260415160446.php

@@ -0,0 +1,47 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Migrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+/**
+ * Class Version20260415160446
+ *
+ * @package  App\Migrations
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 15.
+ */
+final class Version20260415160446 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Add contact mail storage support';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $this->addSql('CREATE SEQUENCE contact_messages_id_seq INCREMENT BY 1 MINVALUE 1 START 1');
+        $this->addSql('CREATE TABLE contact_messages (id INT NOT NULL, name VARCHAR(255) NOT NULL, email VARCHAR(255) NOT NULL, content TEXT NOT NULL, consent BOOLEAN NOT NULL, created_at TIMESTAMP(0) WITHOUT TIME ZONE NOT NULL, ip_address VARCHAR(45) DEFAULT NULL, PRIMARY KEY(id))');
+        $this->addSql('COMMENT ON COLUMN contact_messages.created_at IS \'(DC2Type:datetime_immutable)\'');
+        $this->addSql('ALTER INDEX played_game_uuid_unique RENAME TO UNIQ_54BE8039D17F50A6');
+    }
+
+    public function down(Schema $schema): void
+    {
+        $this->addSql('DROP SEQUENCE contact_messages_id_seq CASCADE');
+        $this->addSql('DROP TABLE contact_messages');
+        $this->addSql('ALTER INDEX uniq_54be8039d17f50a6 RENAME TO played_game_uuid_unique');
+    }
+}

src/Migrations/2026/04/Version20260416094849.php

@@ -0,0 +1,42 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Migrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+/**
+ * Class Version20260416094849
+ *
+ * @package  App\Migrations
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 16.
+ */
+final class Version20260416094849 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Add consent property to user entity for GDPR compliance';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE app_user ADD consent_given BOOLEAN DEFAULT NULL');
+    }
+
+    public function down(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE app_user DROP consent_given');
+    }
+}

src/Repository/ContactMessageRepository.php

@@ -0,0 +1,35 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Repository;
+
+use App\Entity\ContactMessage;
+use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
+use Doctrine\Persistence\ManagerRegistry;
+
+/**
+ * Class ContactMessageRepository
+ *
+ * @package  App\Repository
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 15.
+ *
+ * @extends ServiceEntityRepository<ContactMessage>
+ */
+class ContactMessageRepository extends ServiceEntityRepository
+{
+    public function __construct(ManagerRegistry $registry)
+    {
+        parent::__construct($registry, ContactMessage::class);
+    }
+}

src/Service/BattleCardGenerator.php

@@ -0,0 +1,305 @@
+<?php declare(strict_types=1);
+/*
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Service;
+
+use App\Entity\PlayedGame;
+use Exception;
+use GdImage;
+use League\Flysystem\FilesystemOperator;
+use Psr\Log\LoggerInterface;
+use RuntimeException;
+use Symfony\Component\Uid\Uuid;
+
+/**
+ * Class BattleCardGenerator
+ *
+ * Generates a 1200x630 PNG battle card for Open Graph sharing.
+ *
+ * @package  App\Service
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 14.
+ */
+class BattleCardGenerator
+{
+    private const int    WIDTH       = 1200;
+    private const int    HEIGHT      = 630;
+    private const string FONT        = '/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf';
+    private const int    AVATAR_SIZE = 120;
+
+    public function __construct(
+        private readonly string             $cacheDir,
+        private readonly FilesystemOperator $minioMediaStorage,
+        private readonly LoggerInterface    $logger,
+    ) {
+    }
+
+    /** Returns a deterministic UUID v5 for the given battle ID — same battle always maps to the same filename. */
+    public function cachePath(int $battleId): string
+    {
+        $uuid = Uuid::v5(Uuid::fromString(Uuid::NAMESPACE_URL), 'mineseeker-battle-' . $battleId);
+
+        return $this->cacheDir . '/' . $uuid->toRfc4122() . '.png';
+    }
+
+    public function generate(PlayedGame $game): string
+    {
+        $path = $this->cachePath((int)$game->getId());
+
+        if (is_file($path)) {
+            return $path;
+        }
+
+        if (!is_dir($this->cacheDir)) {
+            if (
+                !mkdir($concurrentDirectory = $this->cacheDir, 0755, true)
+                && !is_dir($concurrentDirectory)
+            ) {
+                $this->logger->error(sprintf('Failed to create directory "%s" for battle card cache', $concurrentDirectory));
+                throw new RuntimeException(sprintf('Directory "%s" was not created', $concurrentDirectory));
+            }
+        }
+
+        $this->render($game, $path);
+
+        return $path;
+    }
+
+    private function render(PlayedGame $game, string $dest): void
+    {
+        $im = imagecreatetruecolor(self::WIDTH, self::HEIGHT);
+
+        /** Palette*/
+        $bg = imagecolorallocate($im, 13, 13, 28);
+        $dot = imagecolorallocate($im, 30, 30, 55);
+        $divider = imagecolorallocate($im, 40, 40, 70);
+        $white = imagecolorallocate($im, 230, 230, 240);
+        $muted = imagecolorallocate($im, 90, 90, 115);
+        $red = imagecolorallocate($im, 246, 125, 82);
+        $blue = imagecolorallocate($im, 149, 207, 245);
+        $gold = imagecolorallocate($im, 255, 200, 50);
+
+        /** Background*/
+        imagefill($im, 0, 0, $bg);
+
+        /** Dot-grid texture*/
+        for ($x = 40; $x < self::WIDTH; $x += 40) {
+            for ($y = 40; $y < self::HEIGHT; $y += 40) {
+                imagesetpixel($im, $x, $y, $dot);
+            }
+        }
+
+        /** Horizontal accent lines*/
+        imageline($im, 0, 90, self::WIDTH, 90, $divider);
+        imageline($im, 0, self::HEIGHT - 60, self::WIDTH, self::HEIGHT - 60, $divider);
+
+        /** Vertical centre divider*/
+        imageline($im, self::WIDTH / 2, 110, self::WIDTH / 2, self::HEIGHT - 80, $divider);
+
+        /** Resolve names*/
+        $redName = $game->getRed()?->getUsername()
+            ?? ($game->getRedAnon() !== null ? 'Anonymous' : 'Guest');
+        $blueName = $game->getBlue()?->getUsername()
+            ?? ($game->getBlueAnon() !== null ? 'Anonymous' : 'Guest');
+        $redPts = $game->getRedPoints();
+        $bluePts = $game->getBluePoints();
+        $resign = $game->getResign();
+
+        /** Winner*/
+        $winner = null;
+        if ($resign === 'red') {
+            $winner = 'blue';
+        } elseif ($resign === 'blue') {
+            $winner = 'red';
+        } elseif ($redPts !== null && $bluePts !== null) {
+            if ($redPts > $bluePts) $winner = 'red';
+            elseif ($bluePts > $redPts) $winner = 'blue';
+            else $winner = 'draw';
+        }
+
+        $this->centeredText($im, 'MineSeeker', 20, self::WIDTH / 2, 58, $muted);
+
+        /** RED and BLUE labels aligned with avatars horizontally*/
+        $this->centeredText($im, 'RED', 16, 220, 130, $red);
+        $this->centeredText($im, 'BLUE', 16, 980, 130, $blue);
+
+        /** Draw avatars below the team labels (moved down by 60px total: 200 → 260)*/
+        $redAvatar = $game->getRed()?->getAvatarPath();
+        $blueAvatar = $game->getBlue()?->getAvatarPath();
+
+        $this->drawAvatar($im, $redAvatar, 220, 260, $red, $redName);
+        $this->drawAvatar($im, $blueAvatar, 980, 260, $blue, $blueName);
+
+        $redColor = $winner === 'red' ? $gold : ($winner === 'draw' ? $white : $red);
+        $blueColor = $winner === 'blue' ? $gold : ($winner === 'draw' ? $white : $blue);
+
+        /** Truncate long usernames (max 10 chars + "...")*/
+        $redNameDisplay = mb_strlen($redName) > 10 ? mb_substr($redName, 0, 10) . '...' : $redName;
+        $blueNameDisplay = mb_strlen($blueName) > 10 ? mb_substr($blueName, 0, 10) . '...' : $blueName;
+
+        /** Player names lower below avatars (moved down by 60px total: 310 → 370)*/
+        $this->centeredTextFit($im, $redNameDisplay, 36, 220, 370, $redColor, 400);
+        $this->centeredTextFit($im, $blueNameDisplay, 36, 980, 370, $blueColor, 400);
+
+        $scoreText = $redPts !== null && $bluePts !== null ? $redPts . '  :  ' . $bluePts : 'VS';
+        $this->centeredText($im, $scoreText, 72, self::WIDTH / 2, 390, $white);
+
+        if ($winner === 'red') {
+            $resultText = $redName . ' wins';
+            $resultColor = $gold;
+        } elseif ($winner === 'blue') {
+            $resultText = $blueName . ' wins';
+            $resultColor = $gold;
+        } elseif ($winner === 'draw') {
+            $resultText = 'Draw';
+            $resultColor = $muted;
+        } else {
+            $resultText = '';
+            $resultColor = $muted;
+        }
+
+        if ($resultText !== '') {
+            $this->centeredText($im, $resultText, 30, self::WIDTH / 2, 460, $resultColor);
+        }
+
+        if ($resign) {
+            $this->centeredText($im, ucfirst($resign) . ' resigned', 18, self::WIDTH / 2, 498, $muted);
+        }
+
+        $this->centeredText($im, 'mineseeker.hu', 16, self::WIDTH / 2, self::HEIGHT - 20, $muted);
+
+        imagepng($im, $dest);
+        imagedestroy($im);
+    }
+
+    /** Draw avatar or initials centered on $cx, $cy. */
+    private function drawAvatar(GdImage $im, ?string $avatarPath, int $cx, int $cy, int $color, string $name): void
+    {
+        $avatarImg = null;
+
+        /** Try to load avatar from MinIO if path exists*/
+        if ($avatarPath) {
+            try {
+                /** Remove 'avatar/' prefix if it exists since storage already has media/ prefix*/
+                $path = str_starts_with($avatarPath, 'avatar/') ? $avatarPath : 'avatar/' . $avatarPath;
+                $avatarData = $this->minioMediaStorage->read($path);
+                $avatarImg = imagecreatefromstring($avatarData);
+            } catch (Exception $e) {
+                /** Failed to load avatar, will use initials*/
+                $avatarImg = null;
+            }
+        }
+
+        $x = $cx - self::AVATAR_SIZE / 2;
+        $y = $cy - self::AVATAR_SIZE / 2;
+
+        if ($avatarImg) {
+            /** Draw circular avatar image*/
+            $mask = imagecreatetruecolor(self::AVATAR_SIZE, self::AVATAR_SIZE);
+            $transparent = imagecolorallocatealpha($mask, 0, 0, 0, 127);
+            imagefill($mask, 0, 0, $transparent);
+
+            /** Create circular mask*/
+            imagefilledellipse(
+                $mask,
+                self::AVATAR_SIZE / 2,
+                self::AVATAR_SIZE / 2,
+                self::AVATAR_SIZE,
+                self::AVATAR_SIZE,
+                imagecolorallocate($mask, 255, 255, 255),
+            );
+
+            /** Resize and crop avatar*/
+            $resized = imagecreatetruecolor(self::AVATAR_SIZE, self::AVATAR_SIZE);
+            imagealphablending($resized, false);
+            imagesavealpha($resized, true);
+            $bg = imagecolorallocatealpha($resized, 0, 0, 0, 127);
+            imagefill($resized, 0, 0, $bg);
+
+            $srcW = imagesx($avatarImg);
+            $srcH = imagesy($avatarImg);
+            $size = min($srcW, $srcH);
+            $srcX = ($srcW - $size) / 2;
+            $srcY = ($srcH - $size) / 2;
+
+            imagecopyresampled(
+                $resized,
+                $avatarImg,
+                0,
+                0,
+                (int)$srcX,
+                (int)$srcY,
+                self::AVATAR_SIZE,
+                self::AVATAR_SIZE,
+                $size,
+                $size,
+            );
+
+            /** Apply circular mask*/
+            for ($py = 0; $py < self::AVATAR_SIZE; $py++) {
+                for ($px = 0; $px < self::AVATAR_SIZE; $px++) {
+                    $maskColor = imagecolorat($mask, $px, $py);
+                    if (($maskColor >> 16) & 0xFF) {
+                        $resizedColor = imagecolorat($resized, $px, $py);
+                        imagesetpixel($im, (int)($x + $px), (int)($y + $py), $resizedColor);
+                    }
+                }
+            }
+
+            imagedestroy($avatarImg);
+            imagedestroy($resized);
+            imagedestroy($mask);
+        } else {
+            /** Draw circular background with initials*/
+            imagefilledellipse($im, (int)$cx, (int)$cy, self::AVATAR_SIZE, self::AVATAR_SIZE, $color);
+
+            /** Draw initials */
+            $initials = mb_strtoupper(mb_substr($name, 0, 2));
+            $fontSize = 48;
+            $bbox = imagettfbbox($fontSize, 0, self::FONT, $initials);
+            $textW = $bbox[2] - $bbox[0];
+            $textH = $bbox[1] - $bbox[7];
+            $textX = $cx - $textW / 2;
+            $textY = $cy + $textH / 2;
+
+            $white = imagecolorallocate($im, 255, 255, 255);
+            imagettftext($im, $fontSize, 0, (int)$textX, (int)$textY, $white, self::FONT, $initials);
+        }
+    }
+
+    /** Render text centered on $cx. */
+    private function centeredText(GdImage $im, string $text, int $size, int $cx, int $y, int $color): void
+    {
+        $bbox = imagettfbbox($size, 0, self::FONT, $text);
+        $w = $bbox[2] - $bbox[0];
+        imagettftext($im, $size, 0, (int)($cx - $w / 2), $y, $color, self::FONT, $text);
+    }
+
+    /** Render text centered on $cx, shrinking font size to fit $maxWidth. */
+    private function centeredTextFit(
+        GdImage $im,
+        string  $text,
+        int     $size,
+        int     $cx,
+        int     $y,
+        int     $color,
+        int     $maxWidth
+    ): void {
+        $bbox = imagettfbbox($size, 0, self::FONT, $text);
+        $w = $bbox[2] - $bbox[0];
+        if ($w > $maxWidth) {
+            $size = (int)($size * $maxWidth / $w);
+        }
+        $this->centeredText($im, $text, $size, $cx, $y, $color);
+    }
+}

src/Util/RpcManager.php

@@ -20,7 +20,9 @@ use Doctrine\ORM\EntityManagerInterface;
 use Exception;
 use JsonException;
 use Psr\Log\LoggerInterface;
+use Random\RandomException;
 use RuntimeException;
+use Symfony\Component\Uid\Uuid;
 
 /**
  * Class RpcManager
@@ -34,9 +36,9 @@ use RuntimeException;
  */
 class RpcManager implements RpcManagerInterface
 {
-    private const ROWS  = 16;
-    private const COLS  = 16;
-    private const MINES = 51;
+    private const int ROWS = 16;
+    private const int COLS  = 16;
+    private const int MINES = 51;
 
     public function __construct(
         private readonly EntityManagerInterface $entityManager,
@@ -99,6 +101,7 @@ class RpcManager implements RpcManagerInterface
             $this->entityManager->persist($grid);
 
             $playedGame->setGameAssoc($gameAssoc);
+            $playedGame->setUuid(Uuid::fromString($gameAssoc));
             $playedGame->setGrid($grid);
             $playedGame->setCreated(new DateTime());
             $playedGame->setUpdated(new DateTime());
@@ -117,25 +120,32 @@ class RpcManager implements RpcManagerInterface
      */
     private function generateGrid(): array
     {
-        // Build flat set: 51 mines ('m') + remaining water ('w')
+        /** Build flat set: 51 mines ('m') + remaining water ('w') */
         $set = array_merge(
             array_fill(0, self::MINES, 'm'),
             array_fill(0, self::ROWS * self::COLS - self::MINES, 'w'),
         );
 
-        // Fisher-Yates shuffle
+        /**
+         * Fisher-Yates shuffle
+         * @see https://en.wikipedia.org/wiki/Fisher%E2%80%93Yates_shuffle
+         */
         for ($i = count($set) - 1; $i > 0; $i--) {
-            $j = random_int(0, $i);
+            try {
+                $j = random_int(0, $i);
+            } catch (RandomException $e) {
+                throw new RuntimeException('Failed to generate random index: ' . $e->getMessage());
+            }
             [$set[$i], $set[$j]] = [$set[$j], $set[$i]];
         }
 
-        // Reshape to 2-D
+        /** Reshape to 2-D */
         $grid = [];
         for ($r = 0; $r < self::ROWS; $r++) {
             $grid[$r] = array_slice($set, $r * self::COLS, self::COLS);
         }
 
-        // Replace 'w' with adjacent-mine count
+        /** Replace 'w' with adjacent-mine count */
         $dirs = [[-1, -1], [-1, 0], [-1, 1], [0, -1], [0, 1], [1, -1], [1, 0], [1, 1]];
         for ($r = 0; $r < self::ROWS; $r++) {
             for ($c = 0; $c < self::COLS; $c++) {

src/Util/TopicManager.php

@@ -18,14 +18,15 @@ use App\Entity\User;
 use App\Interfaces\TopicManagerInterface;
 use App\Repository\PlayedGameRepository;
 use App\Repository\UserRepository;
-use Liip\ImagineBundle\Imagine\Cache\CacheManager;
-use DateTimeInterface;
 use DateTime;
+use DateTimeInterface;
 use Doctrine\ORM\EntityManagerInterface;
 use Exception;
 use JsonException;
+use Liip\ImagineBundle\Imagine\Cache\CacheManager;
 use Psr\Log\LoggerInterface;
 use RuntimeException;
+use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\Mercure\HubInterface;
 use Symfony\Component\Mercure\Update;
 use Symfony\Component\Security\Core\User\UserInterface;
@@ -52,7 +53,7 @@ readonly class TopicManager implements TopicManagerInterface
     ) {
     }
 
-    public function subscribe(string $gameAssoc, string $userName, ?UserInterface $user): void
+    public function subscribe(string $gameAssoc, string $userName, ?UserInterface $user, Request $request): void
     {
         $playedGame = $this->getPlayedGame($gameAssoc);
         if (null === $playedGame) {
@@ -70,7 +71,7 @@ readonly class TopicManager implements TopicManagerInterface
 
         /** Save the player to the database on a fresh join */
         if (!$isKnown && $count < 2) {
-            $users = $this->saveUserToDb($gameAssoc, $userName, $user, $count + 1);
+            $users = $this->saveUserToDb($gameAssoc, $userName, $user, $count + 1, $request);
             $count = $this->getPlayerCount($users);
         }
 
@@ -168,9 +169,6 @@ readonly class TopicManager implements TopicManagerInterface
             return $data;
         }
 
-        // ------------------------------------------------------------------ //
-        //  Normal move
-        // ------------------------------------------------------------------ //
         $coords = $event['coords'];
         $player = $event['player'];          // 'red' | 'blue'
         $isBomb = (bool)$event['bomb'];
@@ -243,10 +241,6 @@ readonly class TopicManager implements TopicManagerInterface
         return $data;
     }
 
-    // ------------------------------------------------------------------ //
-    //  Grid helpers
-    // ------------------------------------------------------------------ //
-
     /** Load the grid rows from the database as a 2-D array. */
     private function loadGrid(string $gameAssoc): array
     {
@@ -403,10 +397,6 @@ readonly class TopicManager implements TopicManagerInterface
         return $mines;
     }
 
-    // ------------------------------------------------------------------ //
-    //  Database helpers
-    // ------------------------------------------------------------------ //
-
     private function getPlayedGame(string $gameAssoc): ?PlayedGame
     {
         return $this->playedGameRepository->findOneByGameAssoc($gameAssoc);
@@ -462,13 +452,18 @@ readonly class TopicManager implements TopicManagerInterface
         }
     }
 
-    private function saveUserToDb(string $gameAssoc, string $userName, ?UserInterface $user, int $count): array
-    {
+    private function saveUserToDb(
+        string         $gameAssoc,
+        string         $userName,
+        ?UserInterface $user,
+        int            $count,
+        Request        $request
+    ): array {
         $playedGame = $this->getPlayedGame($gameAssoc);
 
         null !== $user
             ? $this->saveRegisteredUser($userName, $count, $playedGame)
-            : $this->saveAnonUser($userName, $count, $playedGame);
+            : $this->saveAnonUser($userName, $count, $playedGame, $request);
 
         $this->entityManager->persist($playedGame);
         $this->entityManager->flush();
@@ -495,11 +490,14 @@ readonly class TopicManager implements TopicManagerInterface
         }
     }
 
-    private function saveAnonUser(string $userName, int $count, PlayedGame $playedGame): void
+    private function saveAnonUser(string $userName, int $count, PlayedGame $playedGame, Request $request): void
     {
         try {
             $anon = new Gamer();
-            $anon->setUsername($userName);
+            $anon->setUserName($userName);
+            $anon->setIp($request->getClientIp());
+            $anon->setCountry($this->extractCountry($request));
+            $anon->setUserAgent($request->headers->get('User-Agent'));
             $anon->setConnTimestamp(new DateTime());
             $this->entityManager->persist($anon);
 
@@ -518,8 +516,8 @@ readonly class TopicManager implements TopicManagerInterface
 
     private function getUserCollection(PlayedGame $playedGame): array
     {
-        $redUser   = $playedGame->getRed();
-        $blueUser  = $playedGame->getBlue();
+        $redUser = $playedGame->getRed();
+        $blueUser = $playedGame->getBlue();
 
         return [
             'red'        => null !== $redUser ? $redUser->getUsername() : '',
@@ -527,11 +525,11 @@ readonly class TopicManager implements TopicManagerInterface
             'redAnon'    => null !== $playedGame->getRedAnon() ? $playedGame->getRedAnon()->getUserName() : '',
             'blueAnon'   => null !== $playedGame->getBlueAnon() ? $playedGame->getBlueAnon()->getUserName() : '',
             'redAvatar'  => null !== $redUser && null !== $redUser->getAvatarPath()
-                            ? $this->cacheManager->generateUrl($redUser->getAvatarPath(), 'avatar_thumb')
-                            : null,
+                ? $this->cacheManager->generateUrl($redUser->getAvatarPath(), 'avatar_thumb')
+                : null,
             'blueAvatar' => null !== $blueUser && null !== $blueUser->getAvatarPath()
-                            ? $this->cacheManager->generateUrl($blueUser->getAvatarPath(), 'avatar_thumb')
-                            : null,
+                ? $this->cacheManager->generateUrl($blueUser->getAvatarPath(), 'avatar_thumb')
+                : null,
         ];
     }
 
@@ -585,4 +583,27 @@ readonly class TopicManager implements TopicManagerInterface
             $this->logger->error('Lobby publish error: ' . $e->getMessage());
         }
     }
+
+    private function extractCountry(Request $request): ?string
+    {
+        /** Common headers used by CDNs and proxies to pass country information */
+        $countryHeaders = [
+            'CF-IPCountry',               // Cloudflare
+            'CloudFront-Viewer-Country',  // AWS CloudFront
+            'X-Country-Code',             // Custom header
+            'X-Geoip-Country',            // Generic GeoIP header
+        ];
+
+        foreach ($countryHeaders as $header) {
+            $country = $request->headers->get($header);
+
+            if (empty($country)) {
+                continue;
+            }
+
+            return substr($country, 0, 100);
+        }
+
+        return null;
+    }
 }

templates/Game/battle_share.html.twig

@@ -3,40 +3,46 @@
 {% block title %} - Battle Report{% endblock %}
 
 {% block metas %}
-  {% set shareUrl = url('MineSeekerBundle_battle_share', { id: game.id }) %}
-  <meta property="og:url"         content="{{ shareUrl }}"/>
-  <meta property="og:type"        content="website"/>
-  <meta property="og:title"       content="{{ ogTitle }}"/>
+  {%- set shareUrl = url('MineSeekerBundle_battle_share', { uuid: game.uuid }) | replace({'http://': 'https://'}) -%}
+  {%- set _ogImage = url('MineSeekerBundle_og_battle', { uuid: game.uuid }) | replace({'http://': 'https://'}) -%}
+  <meta property="og:url" content="{{ shareUrl }}"/>
+  <meta property="og:type" content="article"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:locale" content="en_US"/>
+  <meta property="og:title" content="{{ ogTitle }}"/>
   <meta property="og:description" content="{{ ogDesc }}"/>
-  <meta property="og:image"       content="{{ app.request.getSchemeAndHttpHost() }}{{ asset('images/mine-1600x627.png') }}"/>
-  <meta property="og:image:width"  content="1600"/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
   <meta property="og:image:height" content="627"/>
-  <meta name="twitter:card"        content="summary_large_image"/>
-  <meta name="twitter:title"       content="{{ ogTitle }}"/>
+  <meta property="og:image:alt" content="{{ ogTitle }}"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:site" content="@MineSeeker"/>
+  <meta name="twitter:title" content="{{ ogTitle }}"/>
   <meta name="twitter:description" content="{{ ogDesc }}"/>
-  <meta name="twitter:image"       content="{{ app.request.getSchemeAndHttpHost() }}{{ asset('images/mine-1600x627.png') }}"/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
+  <meta name="twitter:image:alt" content="{{ ogTitle }}"/>
 {% endblock %}
 
 {% block body %}
   <div class="bshare-page">
-
     <div class="bshare-card">
-
       <div class="bshare-card__eyebrow">
         <i class="fas fa-crosshairs"></i> Battle Report
       </div>
-
-      {# VS Header #}
       <div class="bshare-vs">
-
         <div class="bshare-player bshare-player--red">
           <div class="bshare-avatar bshare-avatar--red">
-            {{ redName|slice(0,2)|upper }}
+            {% if redAvatar %}
+              <img src="{{ redAvatar|imagine_filter('avatar_thumb') }}"
+                   alt="{{ redName }}"
+                   class="bshare-avatar__img">
+            {% else %}
+              {{ redName|slice(0,2)|upper }}
+            {% endif %}
           </div>
           <span class="bshare-player__name">{{ redName }}</span>
           <span class="bshare-player__side">Red</span>
         </div>
-
         <div class="bshare-vs__center">
           {% if redPts is not null and bluePts is not null %}
             <div class="bshare-score">
@@ -48,8 +54,6 @@
             <div class="bshare-score bshare-score--na">— : —</div>
           {% endif %}
           <div class="bshare-vs__label">VS</div>
-
-          {# Result badge #}
           {% if resign == 'red' %}
             <div class="bshare-badge bshare-badge--blue">
               <i class="fas fa-trophy"></i> Blue wins
@@ -74,18 +78,20 @@
             {% endif %}
           {% endif %}
         </div>
-
         <div class="bshare-player bshare-player--blue">
           <div class="bshare-avatar bshare-avatar--blue">
-            {{ blueName|slice(0,2)|upper }}
+            {% if blueAvatar %}
+              <img src="{{ blueAvatar|imagine_filter('avatar_thumb') }}"
+                   alt="{{ blueName }}"
+                   class="bshare-avatar__img">
+            {% else %}
+              {{ blueName|slice(0,2)|upper }}
+            {% endif %}
           </div>
           <span class="bshare-player__name">{{ blueName }}</span>
           <span class="bshare-player__side">Blue</span>
         </div>
-
       </div>
-
-      {# Details #}
       <div class="bshare-details">
         {% if resign %}
           <div class="bshare-detail">
@@ -112,7 +118,6 @@
           </div>
         {% endif %}
       </div>
-
       <div class="bshare-cta">
         <a href="{{ path('MineSeekerBundle_gamePlay') }}" class="bshare-btn">
           <i class="fas fa-play"></i> Play MineSeeker
@@ -121,8 +126,6 @@
           <i class="fas fa-house"></i> Homepage
         </a>
       </div>
-
     </div>
-
   </div>
 {% endblock %}

templates/Game/index.html.twig

@@ -3,18 +3,27 @@
 {% block title %} - The Game{% endblock %}
 
 {% block metas %}
-  <meta property="og:url" content="{{ url('MineSeekerBundle_homepage') }}"/>
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta property="og:url" content="{{ url('MineSeekerBundle_homepage') | replace({'http://': 'https://'}) }}"/>
   <meta property="og:type" content="website"/>
-  <meta property="og:title" content="MineSeeker"/>
-  <meta property="og:description" content="A multiplayer minesweeper game"/>
-  <meta property="og:image"
-        content="{{ app.request.getSchemeAndHttpHost() }}{{ asset('images/mine-1600x627.png') }}"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:locale" content="en_US"/>
+  <meta property="og:title" content="MineSeeker — Multiplayer Minesweeper"/>
+  <meta property="og:description"
+        content="Race a friend on a hidden minefield. Real-time 1v1 minesweeper in your browser — no account needed. Just play."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
+  <meta property="og:image:height" content="627"/>
+  <meta property="og:image:alt" content="MineSeeker — Multiplayer Minesweeper"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:title" content="MineSeeker — Multiplayer Minesweeper"/>
+  <meta name="twitter:description"
+        content="Race a friend on a hidden minefield. Real-time 1v1 minesweeper in your browser — no account needed. Just play."/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
 {% endblock %}
 
 {% block header %}
-  <section
-    class="hero{% if app.request.attributes.get('_route') != 'MineSeekerBundle_homepage' %} hero--compact{% endif %}">
-
+  <section id="hero-auth">
     <div class="hero-auth">
       {% if is_granted("IS_AUTHENTICATED_REMEMBERED") %}
         <a href="{{ path('MineSeekerBundle_profile') }}" class="hero-auth-btn hero-auth-btn--profile">
@@ -45,7 +54,10 @@
         </a>
       {% endif %}
     </div>
+  </section>
 
+  <section
+    class="hero{% if app.request.attributes.get('_route') != 'MineSeekerBundle_homepage' %} hero--compact{% endif %}">
     <a class="hero-logo" href="{{ path('MineSeekerBundle_homepage') }}">
       <img src="{{ asset('images/mine-logo-txt.png') }}" alt="MineSeeker"/>
     </a>
@@ -61,6 +73,10 @@
         <h1>No account needed.<br>Just play.</h1>
       {% endif %}
       <a href="{{ path('MineSeekerBundle_gamePlay') }}" class="hero-cta">Play Now</a>
+      <p class="hero-donate-text">Love this game?</p>
+      <a href="https://ko-fi.com/splendidbear" target="_blank" rel="noopener" class="hero-donate">
+        Buy me a coffee
+      </a>
     </div>
 
   </section>
@@ -80,7 +96,8 @@
         <p class="feature-block__body">
           Create a free account and every game you play gets recorded.
           Watch your win rate climb, revisit past battles, and prove your dominance
-          on the board — one detonation at a time.
+          on the board — one detonation at a time. Share your greatest victories with friends,
+          replay epic showdowns, and celebrate your legendary moments.
         </p>
         {% if not is_granted("IS_AUTHENTICATED_REMEMBERED") %}
           <a href="{{ path('MineSeekerBundle_register') }}" class="feature-block__cta">
@@ -110,6 +127,86 @@
     </div>
   </section>
 
+  <section class="feature-block feature-block--privacy">
+    <div class="feature-block__inner">
+      <div class="feature-block__visual feature-block__visual--privacy">
+        <i class="fas fa-shield"></i>
+        <i class="fas fa-lock"></i>
+        <i class="fas fa-eye-slash"></i>
+      </div>
+      <div class="feature-block__text">
+        <p class="feature-block__label">Your data, your control</p>
+        <h2 class="feature-block__title">Privacy by Design</h2>
+        <p class="feature-block__body">
+          We believe in transparency and simplicity. Your <strong>username</strong> is your identity here—
+          we never expose your email publicly. Forgot your password? No problem. We keep no social integrations,
+          no third-party tracking, and absolutely zero AI-generated content. Just a pure, clean game experience.
+        </p>
+      </div>
+    </div>
+  </section>
+
+  <section class="feature-block feature-block--reverse feature-block--practice">
+    <div class="feature-block__inner">
+      <div class="feature-block__visual feature-block__visual--practice">
+        <i class="fas fa-laptop"></i>
+        <i class="fab fa-linux"></i>
+        <i class="fab fa-apple"></i>
+        <i class="fab fa-windows"></i>
+      </div>
+      <div class="feature-block__text">
+        <p class="feature-block__label">Train & Compete</p>
+        <h2 class="feature-block__title">Multiplayer Online, Solo Practice</h2>
+        <p class="feature-block__body">
+          Love the challenge of real-time battles? Here, you'll compete live against friends and players worldwide.
+          Want to sharpen your skills solo first? Download our standalone versions for Windows, macOS, and Linux.
+          Practice on your own time, then bring your A-game online.
+        </p>
+        <div class="practice-links">
+          <a
+            href="https://flathub.org/en/apps/org.gnome.Mines"
+            target="_blank"
+            rel="noopener"
+            class="practice-link"
+          >
+            <img
+              src="{{ asset('images/another-games/gnome-mines.png') }}"
+              alt="Mines"
+              class="practice-link-icon"
+            />
+            Linux (Flatpak) &bull; GNOME Mines
+          </a>
+          <a
+            href="https://apps.microsoft.com/detail/9wzdncrfhwcn?hl=en-US&gl=HU"
+            target="_blank"
+            rel="noopener"
+            class="practice-link"
+          >
+            <img
+              src="{{ asset('images/another-games/microsoft-minesweeper.png') }}"
+              alt="Microsoft Minesweeper"
+              class="practice-link-icon"
+            />
+            Windows &bull; Microsoft Minesweeper
+          </a>
+          <a
+            href="https://apps.apple.com/us/app/minesweeper/id1404304731"
+            target="_blank"
+            rel="noopener"
+            class="practice-link"
+          >
+            <img
+              src="{{ asset('images/another-games/apple-minesweeper.png') }}"
+              alt="Minesweeper"
+              class="practice-link-icon"
+            />
+            Apple &bull; Minesweeper
+          </a>
+        </div>
+      </div>
+    </div>
+  </section>
+
   <div class="tech-section">
     <p class="tech-label">Built with</p>
     <div class="tech-logos">
@@ -157,6 +254,7 @@
       <p class="footer-nav-label">Navigate</p>
       <ul>
         <li><a href="{{ path('MineSeekerBundle_homepage') }}">Homepage</a></li>
+        <li><a href="{{ path('MineSeekerBundle_rules') }}">Game Rules</a></li>
         <li><a href="{{ path('MineSeekerBundle_terms') }}">Terms of Use</a></li>
         <li><a href="{{ path('MineSeekerBundle_privacy') }}">Privacy Policy</a></li>
         <li><a href="{{ path('MineSeekerBundle_contact') }}">Contact</a></li>

templates/Game/play.html.twig

@@ -11,23 +11,23 @@
              data-env="{{ env }}"
              data-game-id="{{ app.request.get('gameAssoc') }}"
              data-mercure-hub-url="{{ mercure_hub_url }}"
-             data-mercure-subscriber-jwt="{{ mercure_subscriber_jwt }}">
+             data-mercure-subscriber-jwt="{{ mercure_subscriber_jwt }}"
+             data-recaptcha-site-key="{{ recaptcha_site_key }}">
         </div>
     </div>
 {% endblock %}
 
 {% block metas %}
-    <meta property="og:url" content="{{ url('MineSeekerBundle_gamePlay') }}"/>
+    <meta property="og:url" content="{{ url('MineSeekerBundle_gamePlay') | replace({'http://': 'https://'}) }}"/>
     <meta property="og:type" content="website"/>
     <meta property="og:title" content="Your friend challenges YOU!"/>
     <meta property="og:description" content="Do you accept the challenge?"/>
     <meta property="og:image"
-          content="{{ app.request.getSchemeAndHttpHost() }}{{ asset('/images/mine-1600x627.png') }}"/>
+          content="https://{{ app.request.host }}{{ asset('/images/mine-1600x627.png') }}"/>
 {% endblock %}
 
 {% block stylesheets %}
     {{ vite_entry_link_tags('mineseekerStyle') }}
-
     <style>
         .mine-container {
             background: url('/images/bg-mineseeker-{{ random(1) }}-outbg.jpg') no-repeat;
@@ -37,5 +37,6 @@
 
 {% block javascripts %}
     {{ parent() }}
+    <script src="https://www.google.com/recaptcha/api.js?render={{ recaptcha_site_key }}" async defer></script>
     {{ vite_entry_script_tags('mineseeker', { dependency: 'react' }) }}
 {% endblock %}

templates/Official/contact.html.twig

@@ -2,12 +2,135 @@
 
 {% block title %} - Contact{% endblock %}
 
-{% block body %}
-    <div class="txt">
-        <h2>Contact and user support</h2>
-
-        <h3>Under construction</h3>
-
-        <a href="mailto:langlasz@gmail.com">langlasz@gmail.com</a>
-    </div>
+{% block metas %}
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta property="og:url" content="{{ url('MineSeekerBundle_contact') | replace({'http://': 'https://'}) }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Contact · MineSeeker"/>
+  <meta property="og:description" content="Get in touch with the MineSeeker team."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
+  <meta property="og:image:height" content="627"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:title" content="Contact · MineSeeker"/>
+  <meta name="twitter:description" content="Get in touch with the MineSeeker team."/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
+{% endblock %}
+
+{% block body %}
+  <div class="txt">
+    <h2 style="text-align: center;">Contact and user support</h2>
+
+    {% for message in app.flashes('contact_success') %}
+      <div class="auth-card auth-card--sent" style="margin: 20px auto; max-width: 600px;">
+        <div class="auth-sent-icon"><i class="far fa-envelope"></i></div>
+        <h3 style="color: #667eea; margin: 16px 0;">Message Sent!</h3>
+        <p class="auth-sent-note">{{ message }}</p>
+        <a href="{{ path('MineSeekerBundle_homepage') }}" class="auth-submit" style="text-decoration:none; margin-top:16px;">
+          Back to Home
+        </a>
+      </div>
+    {% else %}
+      <p style="text-align: center; color: #666; margin-bottom: 30px;">
+        Have a question, feedback, or need support? We'd love to hear from you!
+      </p>
+
+      <div class="auth-card" style="max-width: 600px; margin: 0 auto;">
+        {{ form_start(form, {attr: {class: 'auth-form'}}) }}
+
+        <div class="auth-field">
+          <label for="{{ form.name.vars.id }}" class="auth-label">Name *</label>
+          <div class="auth-input-wrap">
+            <i class="fas fa-user auth-input-icon"></i>
+            {{ form_widget(form.name, {
+              attr: {
+                class: 'auth-input' ~ (not form.name.vars.valid ? ' auth-input--error' : ''),
+                placeholder: 'Your name',
+                autofocus: true,
+              }
+            }) }}
+          </div>
+          {% if not form.name.vars.valid %}
+            {% for error in form.name.vars.errors %}
+              <p class="auth-field-error"><i class="fas fa-circle-exclamation"></i> {{ error.message }}</p>
+            {% endfor %}
+          {% endif %}
+        </div>
+
+        <div class="auth-field">
+          <label for="{{ form.email.vars.id }}" class="auth-label">Email *</label>
+          <div class="auth-input-wrap">
+            <i class="fas fa-envelope auth-input-icon"></i>
+            {{ form_widget(form.email, {
+              attr: {
+                class: 'auth-input' ~ (not form.email.vars.valid ? ' auth-input--error' : ''),
+                placeholder: 'your.email@example.com',
+              }
+            }) }}
+          </div>
+          {% if not form.email.vars.valid %}
+            {% for error in form.email.vars.errors %}
+              <p class="auth-field-error"><i class="fas fa-circle-exclamation"></i> {{ error.message }}</p>
+            {% endfor %}
+          {% endif %}
+        </div>
+
+        <div class="auth-field">
+          <label for="{{ form.content.vars.id }}" class="auth-label">Message *</label>
+          <div class="auth-input-wrap">
+            <i class="fas fa-comment-dots auth-input-icon" style="top: 16px;"></i>
+            {{ form_widget(form.content, {
+              attr: {
+                class: 'auth-input' ~ (not form.content.vars.valid ? ' auth-input--error' : ''),
+                placeholder: 'Tell us what\'s on your mind...',
+                rows: 6,
+                style: 'min-height: 150px; resize: vertical;'
+              }
+            }) }}
+          </div>
+          {% if not form.content.vars.valid %}
+            {% for error in form.content.vars.errors %}
+              <p class="auth-field-error"><i class="fas fa-circle-exclamation"></i> {{ error.message }}</p>
+            {% endfor %}
+          {% endif %}
+        </div>
+
+        <div class="auth-field">
+          <label class="auth-checkbox-label" style="display: flex; align-items: flex-start; cursor: pointer; user-select: none;">
+            {{ form_widget(form.consent, {
+              attr: {
+                class: 'auth-checkbox',
+                style: 'margin-right: 10px; margin-top: 3px;'
+              }
+            }) }}
+            <span style="flex: 1; font-size: 14px; line-height: 1.5; color: #666;">
+              I have read the <a href="{{ path('MineSeekerBundle_privacy') }}" target="_blank" style="color: #667eea; text-decoration: none;">Privacy and Data Processing Policy</a> and I consent to the processing of my data. *
+            </span>
+          </label>
+          {% if not form.consent.vars.valid %}
+            {% for error in form.consent.vars.errors %}
+              <p class="auth-field-error"><i class="fas fa-circle-exclamation"></i> {{ error.message }}</p>
+            {% endfor %}
+          {% endif %}
+        </div>
+
+        <button type="submit" class="auth-submit">
+          <i class="fas fa-paper-plane"></i> Send Message
+        </button>
+
+        {{ form_end(form) }}
+      </div>
+    {% endfor %}
+  </div>
+{% endblock %}
+
+{% block javascripts %}
+  {{ parent() }}
+  <script src="https://www.google.com/recaptcha/api.js?render={{ recaptcha_site_key }}" async defer></script>
+  {{ vite_entry_script_tags('contact') }}
+  <div id="contact-form-wrapper"
+       data-site-key="{{ recaptcha_site_key }}"
+       data-recaptcha-field-id="{{ form.recaptcha.vars.id }}">
+  </div>
 {% endblock %}

templates/Official/privacy.html.twig

@@ -2,51 +2,153 @@
 
 {% block title %} - Privacy Policy{% endblock %}
 
-{% block body %}
-    <div class="txt">
-        <h2>MineSeeker Privacy Policy</h2>
-
-        <p>Your privacy is important to us.</p>
-
-        <p>It is MineSeeker's policy to respect your privacy regarding any information we may collect while operating
-            our
-            website. Accordingly, we have developed this privacy policy in order for you to understand how we collect,
-            use,
-            communicate, disclose and otherwise make use of personal information. We have outlined our privacy policy
-            below.</p>
-
-        <ul>
-            <li>We will collect personal information by lawful and fair means and, where appropriate, with the knowledge
-                or
-                consent of the individual concerned.
-            </li>
-            <li>Before or at the time of collecting personal information, we will identify the purposes for which
-                information is being collected.
-            </li>
-            <li>We will collect and use personal information solely for fulfilling those purposes specified by us and
-                for
-                other ancillary purposes, unless we obtain the consent of the individual concerned or as required by
-                law.
-            </li>
-            <li>Personal data should be relevant to the purposes for which it is to be used, and, to the extent
-                necessary
-                for those purposes, should be accurate, complete, and up-to-date.
-            </li>
-            <li>We will protect personal information by using reasonable security safeguards against loss or theft, as
-                well
-                as unauthorized access, disclosure, copying, use or modification.
-            </li>
-            <li>We will make readily available to customers information about our policies and practices relating to the
-                management of personal information.
-            </li>
-            <li>We will only retain personal information for as long as necessary for the fulfilment of those
-                purposes.
-            </li>
-        </ul>
-
-        <p>We are committed to conducting our business in accordance with these principles in order to ensure that the
-            confidentiality of personal information is protected and maintained. MineSeeker may change this privacy
-            policy
-            from time to time at MineSeeker's sole discretion.</p>
-    </div>
+{% block metas %}
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta property="og:url" content="{{ url('MineSeekerBundle_privacy') | replace({'http://': 'https://'}) }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Privacy Policy · MineSeeker"/>
+  <meta property="og:description" content="Read how MineSeeker collects, uses and protects your personal data."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
+  <meta property="og:image:height" content="627"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:title" content="Privacy Policy · MineSeeker"/>
+  <meta name="twitter:description" content="Read how MineSeeker collects, uses and protects your personal data."/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
+{% endblock %}
+
+{% block body %}
+  <div class="txt">
+    <h2>MineSeeker Privacy Policy</h2>
+
+    <p>Your privacy is important to us. MineSeeker is built on principles of transparency and minimal data collection. We believe you should have full control over your personal information and understand exactly how it's used.</p>
+
+    <p>This Privacy Policy explains how we collect, use, protect, and manage your personal information when you use MineSeeker.</p>
+
+    <h3>1. Our Privacy Principles</h3>
+
+    <ul>
+      <li>We collect personal information by lawful and fair means, with your knowledge and consent.</li>
+      <li>We collect and use personal information solely for the purposes specified and no others.</li>
+      <li>Personal data is kept accurate, complete, and up-to-date.</li>
+      <li>We protect personal information with reasonable security safeguards against loss, theft, unauthorized access, disclosure, and modification.</li>
+      <li>We retain personal information only for as long as necessary.</li>
+      <li>We are transparent about our data practices and policies.</li>
+    </ul>
+
+    <h3>2. What Information We Collect</h3>
+
+    <p><strong>Account Information:</strong> When you create a MineSeeker account, we collect:</p>
+    <ul>
+      <li><strong>Username</strong> - Your unique identifier in the game (publicly visible to other players)</li>
+      <li><strong>Email address</strong> - Used only for account recovery and password resets (never publicly exposed)</li>
+      <li><strong>Password</strong> - Securely hashed and encrypted (we never store plain-text passwords)</li>
+      <li><strong>Optional profile data</strong> - Avatar image (if you choose to upload one)</li>
+    </ul>
+
+    <p><strong>Game Data:</strong> To provide multiplayer functionality, we automatically collect:</p>
+    <ul>
+      <li>Game statistics (win/loss records, game duration, board size preferences)</li>
+      <li>Game history (replay data for sharing past battles)</li>
+      <li>Timestamps of games played</li>
+    </ul>
+
+    <p><strong>Technical Information:</strong> We collect minimal technical data:</p>
+    <ul>
+      <li>IP address (for multiplayer game sessions only, not stored long-term)</li>
+      <li>Browser type and version (for compatibility purposes)</li>
+      <li>Device information (to optimize game performance)</li>
+    </ul>
+
+    <h3>3. What We Do NOT Collect</h3>
+
+    <ul>
+      <li><strong>❌ No social authentication:</strong> We don't use Facebook, Google, Twitter, or other social platforms. You create your own account.</li>
+      <li><strong>❌ No AI-generated data:</strong> We don't use AI to profile you or generate insights about your behavior.</li>
+      <li><strong>❌ No tracking cookies or analytics:</strong> We don't use third-party analytics tools to track your movement across the web.</li>
+      <li><strong>❌ No advertisement profiling:</strong> We don't sell or share your data with advertisers.</li>
+      <li><strong>❌ No location tracking:</strong> We don't collect or store your location data.</li>
+    </ul>
+
+    <h3>4. How We Use Your Information</h3>
+
+    <p>Your information is used exclusively for these purposes:</p>
+    <ul>
+      <li><strong>Account management:</strong> Creating and maintaining your account</li>
+      <li><strong>Game functionality:</strong> Matchmaking, real-time multiplayer connections, and game replay storage</li>
+      <li><strong>Security:</strong> Preventing fraud, cheating, and unauthorized access</li>
+      <li><strong>Communication:</strong> Sending password resets or important service updates (very rarely)</li>
+      <li><strong>Improvement:</strong> Analyzing game performance to fix bugs and improve server stability</li>
+    </ul>
+
+    <p>We will <strong>never</strong> use your data for marketing, profiling, or any purpose other than those listed above.</p>
+
+    <h3>5. Data Retention</h3>
+
+    <ul>
+      <li><strong>Active accounts:</strong> Your data is retained while your account is active.</li>
+      <li><strong>Account deletion:</strong> If you delete your account, we retain only anonymized game statistics (for leaderboards) and permanently delete all personal information within 30 days.</li>
+      <li><strong>Game data:</strong> Your game history and replays are retained indefinitely unless you explicitly request deletion.</li>
+      <li><strong>Technical logs:</strong> IP addresses and technical logs are automatically deleted after 90 days.</li>
+    </ul>
+
+    <h3>6. Data Security</h3>
+
+    <ul>
+      <li>All passwords are hashed using industry-standard encryption (bcrypt)</li>
+      <li>Communication between your device and our servers uses HTTPS/TLS encryption</li>
+      <li>Sensitive data is stored on secure, isolated servers</li>
+      <li>We regularly audit security and patch vulnerabilities</li>
+      <li>We conduct no data sharing with third parties unless required by law</li>
+    </ul>
+
+    <h3>7. Your Rights</h3>
+
+    <p>You have the right to:</p>
+    <ul>
+      <li><strong>Access:</strong> Request a copy of all personal data we hold about you</li>
+      <li><strong>Correction:</strong> Update or correct inaccurate information</li>
+      <li><strong>Deletion:</strong> Request deletion of your account and personal data (with 30-day retention for legal compliance)</li>
+      <li><strong>Data portability:</strong> Export your game data in a machine-readable format</li>
+      <li><strong>Withdraw consent:</strong> Opt out of non-essential data collection at any time</li>
+    </ul>
+
+    <p>To exercise any of these rights, contact us at <a href="mailto:privacy@mineseeker.hu">privacy@mineseeker.hu</a></p>
+
+    <h3>8. Third-Party Services</h3>
+
+    <p>We use the following third-party services (strictly necessary for game operation):</p>
+    <ul>
+      <li><strong>Mercure (WebSocket server):</strong> Real-time multiplayer connections</li>
+      <li><strong>Symfony framework:</strong> Web application backend</li>
+      <li><strong>Cloud storage:</strong> Game replays and user data (hosted in EU data centers)</li>
+    </ul>
+
+    <p>These services are contractually bound to respect your privacy and use data only for the purposes we specify.</p>
+
+    <h3>9. Legal Basis for Processing</h3>
+
+    <p>We process your personal data based on:</p>
+    <ul>
+      <li><strong>Contractual necessity:</strong> To provide the MineSeeker service you've agreed to use</li>
+      <li><strong>Legitimate interest:</strong> To maintain security and prevent fraud</li>
+      <li><strong>Compliance with law:</strong> When required by Hungarian or EU law</li>
+    </ul>
+
+    <h3>10. Contact & Disputes</h3>
+
+    <p>If you have questions about this privacy policy or wish to exercise your rights:</p>
+    <ul>
+      <li><strong>Email:</strong> <a href="mailto:privacy@mineseeker.hu">privacy@mineseeker.hu</a></li>
+      <li><strong>Mailing address:</strong> MineSeeker, Budapest, Hungary</li>
+      <li><strong>EU DPA disputes:</strong> If you're in the EU and believe we've violated GDPR, you may lodge a complaint with your local data protection authority</li>
+    </ul>
+
+    <h3>11. Policy Changes</h3>
+
+    <p>MineSeeker may update this privacy policy to reflect changes in our practices or applicable law. We will notify you of significant changes via email or by posting a notice on our website. Your continued use of MineSeeker after changes constitute acceptance of the updated policy.</p>
+
+    <p><strong>Last updated:</strong> {{ "now"|date("F j, Y") }}</p>
+  </div>
 {% endblock %}

templates/Official/rules.html.twig

@@ -0,0 +1,144 @@
+{% extends 'Game/index.html.twig' %}
+
+{% block title %} - Game Rules{% endblock %}
+
+{% block metas %}
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta property="og:url" content="{{ url('MineSeekerBundle_rules') | replace({'http://': 'https://'}) }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Game Rules · MineSeeker"/>
+  <meta property="og:description" content="Learn how to play MineSeeker and discover what you unlock by creating a free account."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
+  <meta property="og:image:height" content="627"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:title" content="Game Rules · MineSeeker"/>
+  <meta name="twitter:description" content="Learn how to play MineSeeker and discover what you unlock by creating a free account."/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
+{% endblock %}
+
+{% block body %}
+  <div class="txt">
+    <h2>MineSeeker Game Rules</h2>
+
+    <p>MineSeeker is a real-time 1v1 twist on the classic minesweeper formula. Two players &mdash; <strong>Red</strong> and <strong>Blue</strong> &mdash; race over the same hidden minefield, taking turns to <strong>hunt the mines</strong>. Each mine you detonate is claimed in your colour and scores a point. The first player to claim the majority of the mines wins.</p>
+
+    <h3>1. The Board</h3>
+
+    <ul>
+      <li>The playing field is a <strong>16&times;16 grid</strong> of covered cells.</li>
+      <li><strong>51 mines</strong> are hidden randomly across the board at the start of each match.</li>
+      <li>Every non-mine cell displays a number indicating how many of its eight neighbours contain a mine &mdash; these numbers are your clues. Cells with no adjacent mines are empty.</li>
+    </ul>
+
+    <h3>2. Turn Order</h3>
+
+    <ul>
+      <li>Players alternate turns. On your turn the status bar reads <em>&ldquo;It is your turn! Make a move&rdquo;</em>; while you wait it reads <em>&ldquo;Your buddy is making a move&rdquo;</em>.</li>
+      <li>On your turn you must perform exactly one action: reveal a cell, flag/unflag a cell, or deploy your bomb.</li>
+      <li><strong>If you hit a mine, you keep your turn</strong> and may click again. Your turn only ends when you reveal a safe cell (or use your bomb).</li>
+    </ul>
+
+    <h3>3. Revealing Cells</h3>
+
+    <ul>
+      <li><strong>Left-click</strong> a covered cell to reveal it.</li>
+      <li>Revealing a <strong>numbered cell</strong> just uncovers the clue &mdash; no points are awarded &mdash; and your turn ends.</li>
+      <li>Revealing an <strong>empty cell</strong> triggers a <strong>flood-fill</strong> that opens all connected empty cells and their numbered borders in a single move. Flood-fill will never step onto a mine, so empty-area sweeps are always safe.</li>
+      <li><strong>Right-click</strong> a covered cell to place a flag where you suspect a mine. Flagged cells cannot be revealed until unflagged.</li>
+    </ul>
+
+    <h3>4. Claiming Mines &amp; Scoring</h3>
+
+    <ul>
+      <li>Clicking a mine is the <strong>goal</strong> of the game, not a failure. The mine is marked with your colour&rsquo;s flag and scores <strong>one point</strong> for you.</li>
+      <li>You keep the turn and may click again &mdash; rack up a streak while you&rsquo;re hot.</li>
+      <li>Your turn only ends when you finally reveal a safe cell (or deploy your bomb).</li>
+    </ul>
+
+    <h3>5. The Bomb</h3>
+
+    <ul>
+      <li>Each player carries <strong>one bomb</strong> per match.</li>
+      <li>Detonating your bomb clears a <strong>5&times;5 blast radius</strong> (25 cells) around the target. <strong>Every mine inside the radius is claimed for your colour and adds to your score.</strong> Numbered cells in the radius are also revealed.</li>
+      <li>The bomb consumes your turn and can only be used once. Save it for a dense patch of suspected mines to burst ahead on the scoreboard.</li>
+    </ul>
+
+    <h3>6. Winning the Match</h3>
+
+    <p>A match ends in one of three ways:</p>
+    <ul>
+      <li><strong>Majority reached</strong> &mdash; the first player to claim more than half of the mines (26 of 51) wins immediately.</li>
+      <li><strong>A player resigns</strong> &mdash; the remaining player wins.</li>
+      <li><strong>Draw</strong> &mdash; if neither player reaches the majority and scores end up equal, the match is recorded as a draw.</li>
+    </ul>
+
+    <h3>7. Playing as a Guest</h3>
+
+    <p>No account is required to play. Just open the game, share the match link with a friend, and play. Guest matches are not saved to a history and carry no stats.</p>
+
+    <h2 style="margin-top: 40px;">Registered User Privileges</h2>
+
+    <p>Creating a free account unlocks everything the guest experience leaves behind. Registration takes under a minute and your email is only used for account recovery.</p>
+
+    <h3>1. Persistent Game History</h3>
+
+    <ul>
+      <li>Every match you play is recorded with timestamps, the full move list, the final grid, and your opponent&rsquo;s name.</li>
+      <li>Replay past battles cell-by-cell and share them with a public UUID link so friends can watch your finest detonations.</li>
+    </ul>
+
+    <div class="img-container">
+      <img style="margin-top: 15px;" src="{{ asset('images/privileges/history.png') }}" alt="Recent Game History" />
+    </div>
+
+    <h3>2. Player Statistics</h3>
+
+    <ul>
+      <li>Total games, wins, losses, and draws.</li>
+      <li>Win rate percentage, average score, personal best score, and total mines hit.</li>
+      <li>A 6-month trend dashboard charting wins, losses, and draws per month.</li>
+    </ul>
+
+    <div class="img-container">
+      <img style="margin-top: 15px;" src="{{ asset('images/privileges/stat.png') }}" alt="Statistics" />
+    </div>
+
+    <h3>3. Profile &amp; Identity</h3>
+
+    <ul>
+      <li>Upload a custom <strong>avatar</strong> that appears next to your username on the board and in the shared battles.</li>
+      <li>Your username is reserved &mdash; no one else can take it.</li>
+    </ul>
+
+    <h3>4. Account Security</h3>
+
+    <ul>
+      <li><strong>Two-factor authentication (TOTP):</strong> Protect your account with an authenticator app and a set of one-time backup codes.</li>
+      <li><strong>WebAuthn passkeys:</strong> Register one or more hardware/biometric security keys for passwordless sign-in.</li>
+      <li>A dedicated <strong>Security</strong> dashboard to manage backup codes, review registered credentials, and rotate them at any time.</li>
+    </ul>
+
+    <div class="img-container">
+      <img style="margin-top: 15px;" src="{{ asset('images/privileges/security.png') }}" alt="Security Dashboard" />
+    </div>
+
+    <h3>5. Shareable Battle Pages</h3>
+
+    <ul>
+      <li>Each recorded match gets a public page with both players&rsquo; names, avatars, final scores, the outcome, and a compact summary of how it played out.</li>
+      <li>Perfect for proving that impossible last-turn comeback.</li>
+    </ul>
+
+    <div class="img-container">
+      <img style="margin-top: 15px;" src="{{ asset('images/privileges/battle.png') }}" alt="Shareable Battle Pages" />
+    </div>
+
+    <div class="img-container">
+      <img style="margin-top: 15px;" src="{{ asset('images/privileges/shared-battle.png') }}" alt="Shared Battle Page" />
+    </div>
+
+    <p style="margin-top: 32px;">Ready to level up? <a href="{{ path('MineSeekerBundle_register') }}">Create your free account</a> or <a href="{{ path('MineSeekerBundle_gamePlay') }}">jump straight into a match</a>.</p>
+  </div>
+{% endblock %}

templates/Official/terms.html.twig

@@ -2,99 +2,161 @@
 
 {% block title %} - Terms of Service{% endblock %}
 
-{% block body %}
-    <div class="txt">
-        <h2>MineSeeker Terms of Service</h2>
-
-        <h3>1. Terms</h3>
-
-        <p>By accessing the website at <a href="https://www.mineseeker.hu">https://www.mineseeker.hu</a>, you are
-            agreeing to be bound by these terms of service, all applicable laws and regulations, and agree that you are
-            responsible for compliance with any applicable local laws. If you do not agree with any of these terms, you
-            are
-            prohibited from using or accessing this site. The materials contained in this website are protected by
-            applicable copyright and trademark law.</p>
-
-        <h3>2. Use License</h3>
-
-        <ol type="a">
-            <li>
-                Permission is granted to temporarily download one copy of the materials (information or software) on
-                MineSeeker's website for personal, non-commercial transitory viewing only. This is the grant of a
-                license,
-                not a transfer of title, and under this license you may not:
-
-                <ol type="i">
-                    <li>modify or copy the materials;</li>
-                    <li>use the materials for any commercial purpose, or for any public display (commercial or
-                        non-commercial);
-                    </li>
-                    <li>attempt to decompile or reverse engineer any software contained on MineSeeker's website;</li>
-                    <li>remove any copyright or other proprietary notations from the materials; or</li>
-                    <li>transfer the materials to another person or "mirror" the materials on any other server.</li>
-                </ol>
-            </li>
-            <li>This license shall automatically terminate if you violate any of these restrictions and may be
-                terminated by
-                MineSeeker at any time. Upon terminating your viewing of these materials or upon the termination of this
-                license, you must destroy any downloaded materials in your possession whether in electronic or printed
-                format.
-            </li>
-        </ol>
-
-        <h3>3. Disclaimer</h3>
-
-        <ol type="a">
-            <li>The materials on MineSeeker's website are provided on an 'as is' basis. MineSeeker makes no warranties,
-                expressed or implied, and hereby disclaims and negates all other warranties including, without
-                limitation,
-                implied warranties or conditions of merchantability, fitness for a particular purpose, or
-                non-infringement
-                of intellectual property or other violation of rights.
-            </li>
-            <li>Further, MineSeeker does not warrant or make any representations concerning the accuracy, likely
-                results, or
-                reliability of the use of the materials on its website or otherwise relating to such materials or on any
-                sites linked to this site.
-            </li>
-        </ol>
-
-        <h3>4. Limitations</h3>
-
-        <p>In no event shall MineSeeker or its suppliers be liable for any damages (including, without limitation,
-            damages
-            for loss of data or profit, or due to business interruption) arising out of the use or inability to use the
-            materials on MineSeeker's website, even if MineSeeker or a MineSeeker authorized representative has been
-            notified orally or in writing of the possibility of such damage. Because some jurisdictions do not allow
-            limitations on implied warranties, or limitations of liability for consequential or incidental damages,
-            these
-            limitations may not apply to you.</p>
-
-        <h3>5. Accuracy of materials</h3>
-
-        <p>The materials appearing on MineSeeker's website could include technical, typographical, or photographic
-            errors.
-            MineSeeker does not warrant that any of the materials on its website are accurate, complete or current.
-            MineSeeker may make changes to the materials contained on its website at any time without notice. However
-            MineSeeker does not make any commitment to update the materials.</p>
-
-        <h3>6. Links</h3>
-
-        <p>MineSeeker has not reviewed all of the sites linked to its website and is not responsible for the contents of
-            any
-            such linked site. The inclusion of any link does not imply endorsement by MineSeeker of the site. Use of any
-            such linked website is at the user's own risk.</p>
-
-        <h3>7. Modifications</h3>
-
-        <p>MineSeeker may revise these terms of service for its website at any time without notice. By using this
-            website
-            you are agreeing to be bound by the then current version of these terms of service.</p>
-
-        <h3>8. Governing Law</h3>
-
-        <p>These terms and conditions are governed by and construed in accordance with the laws of Budapest, Hungary and
-            you
-            irrevocably submit to the exclusive jurisdiction of the courts in that State or location.</p>
-    </div>
+{% block metas %}
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta property="og:url" content="{{ url('MineSeekerBundle_terms') | replace({'http://': 'https://'}) }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Terms of Use · MineSeeker"/>
+  <meta property="og:description" content="Read the MineSeeker terms of use before playing."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
+  <meta property="og:image:height" content="627"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:title" content="Terms of Use · MineSeeker"/>
+  <meta name="twitter:description" content="Read the MineSeeker terms of use before playing."/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
+{% endblock %}
+
+{% block body %}
+  <div class="txt">
+    <h2>MineSeeker Terms of Service</h2>
+
+    <h3>1. Agreement to Terms</h3>
+
+    <p>By accessing and using MineSeeker (https://www.mineseeker.hu), you agree to be bound by these Terms of Service, all applicable laws and regulations, and agree that you are responsible for compliance with any applicable local laws. If you do not agree with any of these terms, you are prohibited from using this service. The materials and content contained in MineSeeker are protected by applicable copyright and trademark law.</p>
+
+    <h3>2. Use License</h3>
+
+    <ol type="a">
+      <li>
+        <p>MineSeeker grants you a limited, non-exclusive, revocable license to access and play MineSeeker for personal, non-commercial purposes only. Under this license, you may not:</p>
+        <ol type="i">
+          <li>modify, copy, or reproduce the game code or assets</li>
+          <li>use MineSeeker for any commercial purpose or for any public display</li>
+          <li>attempt to decompile, reverse engineer, or hack the game software</li>
+          <li>remove any copyright, trademark, or proprietary notices</li>
+          <li>use automated tools, bots, or scripts to play the game (cheating)</li>
+          <li>use the game to harass, abuse, or harm other players</li>
+          <li>attempt to exploit game vulnerabilities for unfair advantage</li>
+          <li>mirror, redistribute, or host MineSeeker on any other server</li>
+        </ol>
+      </li>
+      <li>
+        <p>This license automatically terminates if you violate any of these restrictions. MineSeeker reserves the right to terminate your account and access at any time for violating these terms or for any other reason. Upon termination, you must cease all use of the service.</p>
+      </li>
+    </ol>
+
+    <h3>3. Account Responsibilities</h3>
+
+    <ul>
+      <li><strong>Account creation:</strong> You are responsible for providing accurate information when creating an account and for maintaining the confidentiality of your password.</li>
+      <li><strong>Account security:</strong> You are responsible for all activities that occur under your account. If you suspect unauthorized access, contact us immediately.</li>
+      <li><strong>Username conduct:</strong> Your username must not be offensive, defamatory, or violate anyone's rights. We reserve the right to force username changes.</li>
+      <li><strong>Account termination:</strong> You may delete your account at any time. Upon deletion, your personal information will be deleted within 30 days, but game statistics may be retained anonymously.</li>
+    </ul>
+
+    <h3>4. User Conduct & Prohibited Behavior</h3>
+
+    <p>You agree NOT to:</p>
+    <ul>
+      <li>Use cheats, hacks, exploits, or automation tools</li>
+      <li>Engage in harassment, abuse, threats, or hate speech toward other players</li>
+      <li>Share or distribute malware, viruses, or malicious code</li>
+      <li>Attempt to gain unauthorized access to MineSeeker systems</li>
+      <li>Use the game to spam, phish, or scam other users</li>
+      <li>Share another person's personal information without consent</li>
+      <li>Boost accounts, trade accounts, or share login credentials</li>
+    </ul>
+
+    <p>Violations of these rules may result in account suspension or permanent ban at our sole discretion.</p>
+
+    <h3>5. Intellectual Property Rights</h3>
+
+    <ul>
+      <li>All game content, including code, graphics, sound, and design, is the exclusive property of MineSeeker and protected by copyright.</li>
+      <li>Your gameplay and game statistics belong to you, but we retain the right to use anonymized gameplay data for improving the service.</li>
+      <li>Game replays you create belong to you and can be shared with other players or deleted at your discretion.</li>
+      <li>You grant MineSeeker a license to display your username and game achievements on public leaderboards.</li>
+    </ul>
+
+    <h3>6. Disclaimer of Warranties</h3>
+
+    <ol type="a">
+      <li>
+        <p>MineSeeker is provided on an "AS IS" and "AS AVAILABLE" basis. MineSeeker makes no warranties, express or implied, and hereby disclaims all other warranties including:</p>
+        <ul>
+          <li>Implied warranties of merchantability or fitness for a particular purpose</li>
+          <li>Warranties of accuracy, reliability, or uninterrupted service</li>
+          <li>Warranties of non-infringement of intellectual property rights</li>
+        </ul>
+      </li>
+      <li>MineSeeker does not warrant that the service will be error-free, secure, or meet your specific requirements.</li>
+      <li>MineSeeker is not responsible for delays, delivery failures, or any other issues caused by factors outside our control (internet outages, player hardware, etc.).</li>
+    </ol>
+
+    <h3>7. Limitation of Liability</h3>
+
+    <p>In no event shall MineSeeker or its creators be liable for any damages arising out of the use or inability to use MineSeeker, including:</p>
+    <ul>
+      <li>Loss of data, game progress, or winnings</li>
+      <li>Loss of profit or business interruption</li>
+      <li>Personal injury or property damage</li>
+      <li>Any indirect, incidental, special, or consequential damages</li>
+    </ul>
+
+    <p>Some jurisdictions do not allow limitation of liability, so these limitations may not apply to you.</p>
+
+    <h3>8. Content Accuracy & Changes</h3>
+
+    <ul>
+      <li>MineSeeker may contain technical, typographical, or photographic errors. We don't warrant accuracy or completeness.</li>
+      <li>MineSeeker reserves the right to modify, update, or discontinue features without notice (we will attempt to notify users of major changes).</li>
+      <li>We may take servers offline for maintenance with minimal notice.</li>
+      <li>Game rules and mechanics may be adjusted for balance or fairness.</li>
+    </ul>
+
+    <h3>9. External Links</h3>
+
+    <p>MineSeeker may contain links to external websites. We are not responsible for the content, accuracy, or practices of linked sites. Use of linked websites is at your own risk and subject to their terms of service.</p>
+
+    <h3>10. Termination of Service</h3>
+
+    <ul>
+      <li>MineSeeker may suspend or terminate your account if you violate these terms.</li>
+      <li>MineSeeker may discontinue the service at any time with reasonable notice (we will provide at least 30 days notice before full shutdown).</li>
+      <li>Upon termination, your right to use MineSeeker immediately ceases.</li>
+    </ul>
+
+    <h3>11. Modifications to Terms</h3>
+
+    <p>MineSeeker may revise these terms at any time without notice. Your continued use of the service after changes constitutes acceptance of the updated terms. We recommend reviewing these terms periodically.</p>
+
+    <h3>12. Governing Law & Jurisdiction</h3>
+
+    <p>These terms are governed by and construed in accordance with the laws of Budapest, Hungary, without regard to its conflicts of law principles. You irrevocably submit to the exclusive jurisdiction of the courts located in Budapest, Hungary.</p>
+
+    <h3>13. Dispute Resolution</h3>
+
+    <p>Before initiating legal action, you agree to attempt to resolve disputes through good-faith negotiation. If a dispute cannot be resolved informally, you may pursue legal remedies in the courts of Budapest, Hungary.</p>
+
+    <h3>14. Severability</h3>
+
+    <p>If any provision of these terms is found to be invalid or unenforceable, that provision shall be severed, and the remaining provisions shall remain in full force and effect.</p>
+
+    <h3>15. Entire Agreement</h3>
+
+    <p>These Terms of Service, together with our Privacy Policy, constitute the entire agreement between you and MineSeeker regarding your use of the service and supersede all prior agreements.</p>
+
+    <h3>16. Contact Information</h3>
+
+    <p>If you have questions or concerns about these terms:</p>
+    <ul>
+      <li><strong>Email:</strong> <a href="mailto:contact@mineseeker.hu">contact@mineseeker.hu</a></li>
+      <li><strong>Website:</strong> <a href="https://www.mineseeker.hu">https://www.mineseeker.hu</a></li>
+      <li><strong>Location:</strong> Budapest, Hungary</li>
+    </ul>
+
+    <p><strong>Last updated:</strong> {{ "now"|date("F j, Y") }}</p>
+  </div>
 {% endblock %}

templates/Security/2fa.html.twig

@@ -2,6 +2,17 @@
 
 {% block title %} - Two-Factor Authentication{% endblock %}
 
+{% block metas %}
+  <meta name="robots" content="noindex,nofollow"/>
+  <meta property="og:url" content="{{ app.request.uri }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Two-Factor Authentication · MineSeeker"/>
+  <meta property="og:description" content="Verify your identity to access your MineSeeker account."/>
+  <meta name="twitter:card" content="summary"/>
+  <meta name="twitter:title" content="Two-Factor Authentication · MineSeeker"/>
+{% endblock %}
+
 {% block body %}
   <div class="auth-page">
     <div class="auth-card">

templates/Security/2fa_setup.html.twig

@@ -2,6 +2,17 @@
 
 {% block title %} - Enable Two-Factor Authentication{% endblock %}
 
+{% block metas %}
+  <meta name="robots" content="noindex,nofollow"/>
+  <meta property="og:url" content="{{ app.request.uri }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Enable 2FA · MineSeeker"/>
+  <meta property="og:description" content="Set up two-factor authentication to secure your MineSeeker account."/>
+  <meta name="twitter:card" content="summary"/>
+  <meta name="twitter:title" content="Enable 2FA · MineSeeker"/>
+{% endblock %}
+
 {% block body %}
   <div class="auth-page">
     <div class="auth-card auth-card--wide">

templates/Security/forgot_password.html.twig

@@ -2,6 +2,19 @@
 
 {% block title %} - Forgot Password{% endblock %}
 
+{% block metas %}
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta name="robots" content="noindex,nofollow"/>
+  <meta property="og:url" content="{{ app.request.uri }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Reset Password · MineSeeker"/>
+  <meta property="og:description" content="Reset your MineSeeker account password."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta name="twitter:card" content="summary"/>
+  <meta name="twitter:title" content="Reset Password · MineSeeker"/>
+{% endblock %}
+
 {% block body %}
   <div class="auth-page">
     {% for email in app.flashes('reset_sent') %}
@@ -26,28 +39,28 @@
 
         {{ form_start(form, {attr: {class: 'auth-form'}}) }}
 
-          <div class="auth-field">
-            <label for="{{ form.email.vars.id }}" class="auth-label">Email</label>
-            <div class="auth-input-wrap">
-              <i class="fas fa-envelope auth-input-icon"></i>
-              {{ form_widget(form.email, {
-                attr: {
-                  class: 'auth-input' ~ (not form.email.vars.valid ? ' auth-input--error' : ''),
-                  autocomplete: 'email',
-                  autofocus: true,
-                }
-              }) }}
-            </div>
-            {% if not form.email.vars.valid %}
-              {% for error in form.email.vars.errors %}
-                <p class="auth-field-error"><i class="fas fa-circle-exclamation"></i> {{ error.message }}</p>
-              {% endfor %}
-            {% endif %}
+        <div class="auth-field">
+          <label for="{{ form.email.vars.id }}" class="auth-label">Email</label>
+          <div class="auth-input-wrap">
+            <i class="fas fa-envelope auth-input-icon"></i>
+            {{ form_widget(form.email, {
+              attr: {
+                class: 'auth-input' ~ (not form.email.vars.valid ? ' auth-input--error' : ''),
+                autocomplete: 'email',
+                autofocus: true,
+              }
+            }) }}
           </div>
+          {% if not form.email.vars.valid %}
+            {% for error in form.email.vars.errors %}
+              <p class="auth-field-error"><i class="fas fa-circle-exclamation"></i> {{ error.message }}</p>
+            {% endfor %}
+          {% endif %}
+        </div>
 
-          <button type="submit" class="auth-submit">
-            <i class="fas fa-paper-plane"></i> Send Reset Link
-          </button>
+        <button type="submit" class="auth-submit">
+          <i class="fas fa-paper-plane"></i> Send Reset Link
+        </button>
 
         {{ form_end(form) }}
 

templates/Security/login.html.twig

@@ -2,6 +2,25 @@
 
 {% block title %} - Sign In{% endblock %}
 
+{% block metas %}
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta name="robots" content="noindex,nofollow"/>
+  <meta property="og:url" content="{{ app.request.uri }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Sign In · MineSeeker"/>
+  <meta property="og:description"
+        content="Sign in to MineSeeker and keep track of your wins, stats and battle history."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
+  <meta property="og:image:height" content="627"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:title" content="Sign In · MineSeeker"/>
+  <meta name="twitter:description"
+        content="Sign in to MineSeeker and keep track of your wins, stats and battle history."/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
+{% endblock %}
+
 {% block body %}
   <div class="auth-page">
     {% for message in app.flashes('success') %}

templates/Security/profile.html.twig

@@ -2,6 +2,25 @@
 
 {% block title %} - Profile{% endblock %}
 
+{% block metas %}
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta name="robots" content="noindex,nofollow"/>
+  <meta property="og:url" content="{{ url('MineSeekerBundle_profile') | replace({'http://': 'https://'}) }}"/>
+  <meta property="og:type" content="profile"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="{{ app.user.username }} · MineSeeker"/>
+  <meta property="og:description"
+        content="View {{ app.user.username }}'s battle stats, win rate and recent games on MineSeeker."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
+  <meta property="og:image:height" content="627"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:title" content="{{ app.user.username }} · MineSeeker"/>
+  <meta name="twitter:description"
+        content="View {{ app.user.username }}'s battle stats, win rate and recent games on MineSeeker."/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
+{% endblock %}
+
 {% block body %}
   <div class="profile-page">
     <div class="profile-header">

templates/Security/profile_security.html.twig

@@ -2,6 +2,25 @@
 
 {% block title %} - Security Settings{% endblock %}
 
+{% block metas %}
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta name="robots" content="noindex,nofollow"/>
+  <meta property="og:url" content="{{ url('MineSeekerBundle_profile_security') | replace({'http://': 'https://'}) }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Security Settings · MineSeeker"/>
+  <meta property="og:description"
+        content="Manage your MineSeeker account security — passkeys, two-factor authentication and more."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
+  <meta property="og:image:height" content="627"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:title" content="Security Settings · MineSeeker"/>
+  <meta name="twitter:description"
+        content="Manage your MineSeeker account security — passkeys, two-factor authentication and more."/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
+{% endblock %}
+
 {% block body %}
   <div class="profile-page">
     <div class="profile-actions">

templates/Security/register.html.twig

@@ -2,6 +2,24 @@
 
 {% block title %} - Register{% endblock %}
 
+{% block metas %}
+  {%- set _ogImage = 'https://' ~ app.request.host ~ asset('/images/mine-1600x627.png') -%}
+  <meta property="og:url" content="{{ app.request.uri }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Create Account · MineSeeker"/>
+  <meta property="og:description"
+        content="Join MineSeeker for free. Track your wins, relive your best battles and prove you're the better minesweeper."/>
+  <meta property="og:image" content="{{ _ogImage }}"/>
+  <meta property="og:image:width" content="1600"/>
+  <meta property="og:image:height" content="627"/>
+  <meta name="twitter:card" content="summary_large_image"/>
+  <meta name="twitter:title" content="Create Account · MineSeeker"/>
+  <meta name="twitter:description"
+        content="Join MineSeeker for free. Track your wins, relive your best battles and prove you're the better minesweeper."/>
+  <meta name="twitter:image" content="{{ _ogImage }}"/>
+{% endblock %}
+
 {% block body %}
   <div class="auth-page">
     {% for email in app.flashes('verify_email') %}
@@ -99,6 +117,25 @@
           </div>
         </div>
 
+        <div class="auth-field">
+          <label class="auth-checkbox-label" style="display: flex; align-items: flex-start; cursor: pointer; user-select: none;">
+            {{ form_widget(form.consentGiven, {
+              attr: {
+                class: 'auth-checkbox',
+                style: 'margin-right: 10px; margin-top: 3px;'
+              }
+            }) }}
+            <span style="flex: 1; font-size: 14px; line-height: 1.5; color: #666;">
+              I have read the <a href="{{ path('MineSeekerBundle_privacy') }}" target="_blank" style="color: #667eea; text-decoration: none;">Privacy and Data Processing Policy</a> and I consent to the processing of my data. *
+            </span>
+          </label>
+          {% if not form.consentGiven.vars.valid %}
+            {% for error in form.consentGiven.vars.errors %}
+              <p class="auth-field-error"><i class="fas fa-circle-exclamation"></i> {{ error.message }}</p>
+            {% endfor %}
+          {% endif %}
+        </div>
+
         <button type="submit" class="auth-submit">
           <i class="fas fa-user-plus"></i> Create Account
         </button>

templates/Security/reset_password.html.twig

@@ -2,6 +2,17 @@
 
 {% block title %} - Reset Password{% endblock %}
 
+{% block metas %}
+  <meta name="robots" content="noindex,nofollow"/>
+  <meta property="og:url" content="{{ app.request.uri }}"/>
+  <meta property="og:type" content="website"/>
+  <meta property="og:site_name" content="MineSeeker"/>
+  <meta property="og:title" content="Set New Password · MineSeeker"/>
+  <meta property="og:description" content="Set a new password for your MineSeeker account."/>
+  <meta name="twitter:card" content="summary"/>
+  <meta name="twitter:title" content="Set New Password · MineSeeker"/>
+{% endblock %}
+
 {% block body %}
   <div class="auth-page">
     <div class="auth-card">

templates/emails/activation.html.twig

@@ -77,7 +77,7 @@
 <body>
 <div class="wrapper">
     <div class="logo">
-        <img src="{{ absolute_url(asset('images/mine-logo-txt.png')) }}" alt="MineSeeker"/>
+        <img src="{{ absolute_url(asset('images/mine-logo-txt.png')) | replace({'http://': 'https://'}) }}" alt="MineSeeker"/>
     </div>
     <div class="card">
         <h1>One step to go</h1>

templates/emails/contact_notification.html.twig

@@ -0,0 +1,98 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>New Contact Message</title>
+    <style>
+        body {
+            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
+            line-height: 1.6;
+            color: #333;
+            max-width: 600px;
+            margin: 0 auto;
+            padding: 20px;
+        }
+        .header {
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+            padding: 30px;
+            border-radius: 8px 8px 0 0;
+            text-align: center;
+        }
+        .header h1 {
+            margin: 0;
+            font-size: 24px;
+        }
+        .content {
+            background: #f9f9f9;
+            padding: 30px;
+            border-radius: 0 0 8px 8px;
+        }
+        .field {
+            margin-bottom: 20px;
+        }
+        .field-label {
+            font-weight: 600;
+            color: #666;
+            font-size: 12px;
+            text-transform: uppercase;
+            letter-spacing: 0.5px;
+            margin-bottom: 5px;
+        }
+        .field-value {
+            background: white;
+            padding: 12px;
+            border-radius: 4px;
+            border-left: 3px solid #667eea;
+        }
+        .message-content {
+            white-space: pre-wrap;
+            word-wrap: break-word;
+        }
+        .footer {
+            margin-top: 20px;
+            padding-top: 20px;
+            border-top: 1px solid #ddd;
+            font-size: 12px;
+            color: #999;
+            text-align: center;
+        }
+    </style>
+</head>
+<body>
+    <div class="header">
+        <h1>📬 New Contact Message</h1>
+    </div>
+    <div class="content">
+        <div class="field">
+            <div class="field-label">From</div>
+            <div class="field-value">
+                <strong>{{ message.name }}</strong><br>
+                <a href="mailto:{{ message.email }}">{{ message.email }}</a>
+            </div>
+        </div>
+
+        <div class="field">
+            <div class="field-label">Message</div>
+            <div class="field-value message-content">{{ message.content }}</div>
+        </div>
+
+        <div class="field">
+            <div class="field-label">Details</div>
+            <div class="field-value">
+                <strong>Submitted:</strong> {{ message.createdAt|date('Y-m-d H:i:s') }}<br>
+                {% if message.ipAddress %}
+                    <strong>IP Address:</strong> {{ message.ipAddress }}<br>
+                {% endif %}
+                <strong>Consent:</strong> {% if message.consent %}✓ Given{% else %}✗ Not given{% endif %}
+            </div>
+        </div>
+
+        <div class="footer">
+            This message was sent via the MineSeeker contact form.<br>
+            You can reply directly to this email to respond to {{ message.name }}.
+        </div>
+    </div>
+</body>
+</html>
+

templates/emails/reset_password.html.twig

@@ -91,7 +91,7 @@
 <body>
 <div class="wrapper">
   <div class="logo">
-    <img src="{{ absolute_url(asset('images/mine-logo-txt.png')) }}" alt="MineSeeker"/>
+    <img src="{{ absolute_url(asset('images/mine-logo-txt.png')) | replace({'http://': 'https://'}) }}" alt="MineSeeker"/>
   </div>
   <div class="card">
     <h1>Reset your password</h1>

templates/emails/user_activation_notification.html.twig

@@ -0,0 +1,92 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>User Account Activated</title>
+    <style>
+        body {
+            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
+            line-height: 1.6;
+            color: #333;
+            max-width: 600px;
+            margin: 0 auto;
+            padding: 20px;
+        }
+        .header {
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+            padding: 30px;
+            border-radius: 8px 8px 0 0;
+            text-align: center;
+        }
+        .header h1 {
+            margin: 0;
+            font-size: 24px;
+        }
+        .content {
+            background: #f9f9f9;
+            padding: 30px;
+            border-radius: 0 0 8px 8px;
+        }
+        .field {
+            margin-bottom: 20px;
+        }
+        .field-label {
+            font-weight: 600;
+            color: #666;
+            font-size: 12px;
+            text-transform: uppercase;
+            letter-spacing: 0.5px;
+            margin-bottom: 5px;
+        }
+        .field-value {
+            background: white;
+            padding: 12px;
+            border-radius: 4px;
+            border-left: 3px solid #667eea;
+        }
+        .footer {
+            margin-top: 20px;
+            padding-top: 20px;
+            border-top: 1px solid #ddd;
+            font-size: 12px;
+            color: #999;
+            text-align: center;
+        }
+    </style>
+</head>
+<body>
+    <div class="header">
+        <h1>✅ User Account Activated</h1>
+    </div>
+    <div class="content">
+        <div class="field">
+            <div class="field-label">Username</div>
+            <div class="field-value">
+                <strong>{{ user.username }}</strong>
+            </div>
+        </div>
+
+        <div class="field">
+            <div class="field-label">Email</div>
+            <div class="field-value">
+                <a href="mailto:{{ user.email }}">{{ user.email }}</a>
+            </div>
+        </div>
+
+        <div class="field">
+            <div class="field-label">Details</div>
+            <div class="field-value">
+                <strong>Activated:</strong> {{ activatedAt|date('Y-m-d H:i:s') }}<br>
+                <strong>Status:</strong> ✓ Email Verified - Account Active<br>
+                <strong>Email Verified:</strong> Yes
+            </div>
+        </div>
+
+        <div class="footer">
+            A user has successfully verified their email and activated their account on MineSeeker.<br>
+            They can now play games immediately.
+        </div>
+    </div>
+</body>
+</html>

templates/emails/user_registration_notification.html.twig

@@ -0,0 +1,92 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>New User Registration</title>
+    <style>
+        body {
+            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
+            line-height: 1.6;
+            color: #333;
+            max-width: 600px;
+            margin: 0 auto;
+            padding: 20px;
+        }
+        .header {
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+            padding: 30px;
+            border-radius: 8px 8px 0 0;
+            text-align: center;
+        }
+        .header h1 {
+            margin: 0;
+            font-size: 24px;
+        }
+        .content {
+            background: #f9f9f9;
+            padding: 30px;
+            border-radius: 0 0 8px 8px;
+        }
+        .field {
+            margin-bottom: 20px;
+        }
+        .field-label {
+            font-weight: 600;
+            color: #666;
+            font-size: 12px;
+            text-transform: uppercase;
+            letter-spacing: 0.5px;
+            margin-bottom: 5px;
+        }
+        .field-value {
+            background: white;
+            padding: 12px;
+            border-radius: 4px;
+            border-left: 3px solid #667eea;
+        }
+        .footer {
+            margin-top: 20px;
+            padding-top: 20px;
+            border-top: 1px solid #ddd;
+            font-size: 12px;
+            color: #999;
+            text-align: center;
+        }
+    </style>
+</head>
+<body>
+    <div class="header">
+        <h1>👤 New User Registration</h1>
+    </div>
+    <div class="content">
+        <div class="field">
+            <div class="field-label">Username</div>
+            <div class="field-value">
+                <strong>{{ user.username }}</strong>
+            </div>
+        </div>
+
+        <div class="field">
+            <div class="field-label">Email</div>
+            <div class="field-value">
+                <a href="mailto:{{ user.email }}">{{ user.email }}</a>
+            </div>
+        </div>
+
+        <div class="field">
+            <div class="field-label">Details</div>
+            <div class="field-value">
+                <strong>Registered:</strong> {{ registeredAt|date('Y-m-d H:i:s') }}<br>
+                <strong>Status:</strong> {% if user.isVerified %}✓ Verified{% else %}⏳ Awaiting Email Verification{% endif %}<br>
+                <strong>Email Verified:</strong> {% if user.isVerified %}Yes{% else %}No - activation link sent{% endif %}
+            </div>
+        </div>
+
+        <div class="footer">
+            A new user has registered on MineSeeker.<br>
+            User must verify their email before account is fully activated.
+        </div>
+    </div>
+</body>
+</html>

vite.config.js

@@ -25,6 +25,7 @@ export default defineConfig({
         mineseeker: './assets/js/app.jsx',
         passkey: './assets/js/passkey.jsx',
         profile: './assets/js/profile.jsx',
+        contact: './assets/js/contact.jsx',
         mineseekerStyle: './assets/css/style.mineseeker.scss',
         homeStyle: './assets/css/style.layout.scss',
         passkeyStyle: './assets/css/passkey.scss',