[Release] Create public account deletion request URL

[jjoonleo]

Backlog ID: ISSUE-008
Source: plans/release_app_todos.md

Goal

Provide the external deletion request mechanism required by Google Play for apps with account creation.

Parallelization

Status: manual

Prerequisites

• Human/web or backend owner access - Requires a public deletion request URL outside the app.

Acceptance criteria

• A public web URL lets users request account deletion outside the app.
• URL works without installing or opening the app.
• URL explains what data is deleted and what may be retained.
• URL is entered in the Play Console account deletion field.
• URL is recorded in release documentation.

Codex thread guidance

• Work only on this issue's scope.
• Do not modify unrelated release issues.
• If this issue is blocked by external access or human approval, prepare the needed checklist/text and leave the issue open.
• Codex may specify required page content, but creating/hosting the external URL requires web/backend ownership.

[jjoonleo]

Applied the provided account deletion request URL to release docs:

• URL: https://ontime-back.duckdns.org/account-deletion
• Updated docs/Privacy-Policy-Draft.md to reference this outside-app deletion request URL.
• Updated docs/Account-Deletion-Request-URL.md final URL record and page-content expectations.

Important verification note: a public fetch currently returns 401 Unauthorized, so #440 should remain open until the page loads over public HTTPS without login/incognito and the request workflow is confirmed. Google Play requires the deletion URL to work without installing/opening the app and without login.

[jjoonleo]

Correction after rechecking the provided URL with direct local curl verification:

• URL: https://ontime-back.duckdns.org/account-deletion
• HTTP status: 200 OK
• Final URL: https://ontime-back.duckdns.org/account-deletion
• Content-Type: text/html
• Redirects: 0

The page is publicly reachable over HTTPS and includes OnTime account deletion instructions, developer/contact info, deleted data, retained data, and retention periods.

Updated docs/Account-Deletion-Request-URL.md to mark public HTTPS access, no-login/no-redirect behavior, OnTime/developer reference, and visible deletion path as verified. #440 should still remain open until the request workflow is confirmed and the URL is entered in Play Console.

[jjoonleo]

Request workflow confirmed by owner: deletion requests sent through the public account deletion page reach the responsible owner/backend workflow.

Updated docs/Account-Deletion-Request-URL.md to mark request submission and owner/backend receipt as verified.

Remaining #440 gate: enter https://ontime-back.duckdns.org/account-deletion in the required Google Play Console account deletion/Data safety field and record evidence.

[jjoonleo]

Entered and saved the public account deletion URL in Play Console.

Field updated:

• Data safety > Data collection and security > Delete account URL
• Value: https://ontime-back.duckdns.org/account-deletion

I saved the Play Console draft after confirming these visible values:

• App collects required user data: Yes
• Data encrypted in transit: Yes
• Account creation methods: Username and password, OAuth
• Delete account URL: https://ontime-back.duckdns.org/account-deletion

This completes #440 scope. The broader Data safety questionnaire remains for #441.