feat(docs): add comprehensive data privacy documentation v3.2.0

- Create guide/data-privacy.md with retention policies (5y/30d/0)
- Add privacy notice to README.md
- Add section 2.6 "Data Flow & Privacy" to ultimate-guide.md
- Add Golden Rule #7 to cheatsheet.md (know what's sent)
- Add Phase 0.5 Privacy Awareness to onboarding-prompt.md
- Add privacy checks to audit-prompt.md
- Add PRIVACY CHECK section to audit-scan.sh (human + JSON)
- Add privacy reminder to check-claude.sh
- Create privacy-warning.sh SessionStart hook

Addresses user awareness of Anthropic data retention and opt-out options.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

examples/scripts/audit-scan.sh

@@ -588,6 +588,12 @@ if [[ "$OUTPUT_MODE" == "json" ]]; then
     "claude_md_lines": $CLAUDE_MD_LINES,
     "claude_md_refs": $CLAUDE_MD_REFS
   },
+  "privacy": {
+    "env_excluded": $([ -f "./.claude/settings.json" ] && grep -q '\.env' "./.claude/settings.json" 2>/dev/null && echo "true" || echo "false"),
+    "has_db_mcp": $(echo "$MCP_ALL_SERVERS" | grep -qiE "postgres|neon|supabase|mysql|database" 2>/dev/null && echo "true" || echo "false"),
+    "opt_out_link": "https://claude.ai/settings/data-privacy-controls",
+    "guide_link": "guide/data-privacy.md"
+  },
   "mcp": {
     "configured": $([ -n "$MCP_SERVERS" ] && echo "true" || echo "false"),
     "count": $MCP_COUNT,
@@ -649,6 +655,24 @@ else
     fi
   fi
 
+  echo -e "\n${BLUE}🔐 PRIVACY CHECK${NC}"
+  # Check excludePatterns for sensitive files
+  HAS_ENV_EXCLUSION="false"
+  if [[ -f "./.claude/settings.json" ]]; then
+    grep -q '\.env' "./.claude/settings.json" 2>/dev/null && HAS_ENV_EXCLUSION="true"
+  fi
+
+  [[ "$HAS_ENV_EXCLUSION" == "true" ]] && echo -e "  ${GREEN}✅${NC} .env excluded in settings" || echo -e "  ${RED}⚠️${NC}  .env NOT excluded (add to excludePatterns)"
+
+  # Check for database MCP servers (production risk)
+  if echo "$MCP_ALL_SERVERS" | grep -qiE "postgres|neon|supabase|mysql|database" 2>/dev/null; then
+    echo -e "  ${YELLOW}⚠️${NC}  Database MCP detected → ensure NOT production data"
+  fi
+
+  # Privacy reminders
+  echo -e "  ${CYAN}💡${NC} Opt-out training: https://claude.ai/settings/data-privacy-controls"
+  echo -e "  ${CYAN}💡${NC} Full guide: guide/data-privacy.md"
+
   echo -e "\n${BLUE}🔌 MCP SERVERS${NC}"
   if [[ -n "$MCP_ALL_SERVERS" ]]; then
     echo -e "  ${GREEN}✅${NC} Configured ($MCP_COUNT total): $MCP_ALL_SERVERS"

examples/scripts/check-claude.sh

@@ -26,6 +26,11 @@ else
     echo "✗ ANTHROPIC_API_KEY not set"
 fi
 
+echo -e "\n--- Privacy Reminder ---"
+echo "⚠️  Your prompts and file contents are sent to Anthropic"
+echo "   Default retention: 5 years (training) | Opt-out: 30 days"
+echo "   → Disable training: https://claude.ai/settings/data-privacy-controls"
+
 echo -e "\n--- MCP Servers ---"
 claude mcp list