diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c0711b0..7f1f3c8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -180,6 +180,8 @@ jobs:
             echo
             echo "**Download** \`$(basename "$zip")\`, unzip it anywhere and run \`FastbootStudio.exe\`. Nothing to install: .NET, adb and fastboot are included."
             echo
+            echo "Code signing policy: [CODE_SIGNING.md](https://github.com/$GITHUB_REPOSITORY/blob/$RELEASE_VERSION/CODE_SIGNING.md)"
+            echo
             echo "Full changelog: [CHANGELOG.md](https://github.com/$GITHUB_REPOSITORY/blob/$RELEASE_VERSION/CHANGELOG.md) · [README](https://github.com/$GITHUB_REPOSITORY/blob/$RELEASE_VERSION/README.md) · [العربية](https://github.com/$GITHUB_REPOSITORY/blob/$RELEASE_VERSION/README.ar.md)"
           } > notes.md
           cat notes.md
diff --git a/CODE_SIGNING.md b/CODE_SIGNING.md
index 14f8109..dd4ee48 100644
--- a/CODE_SIGNING.md
+++ b/CODE_SIGNING.md
@@ -30,9 +30,12 @@ on GitHub and SignPath.
 
 ## Privacy
 
-Fastboot Studio does not send any information to other networked systems. It talks only to
-the phone connected over USB (through adb and fastboot), and opens web pages in your browser
-only when you click a link in the app.
+This program will not transfer any information to other networked systems unless
+specifically requested by the user or the person installing or operating it.
+
+Fastboot Studio talks only to the phone connected over USB (through adb and fastboot). It
+has no telemetry and no update check, and it opens a web page in your browser only when you
+click a link in the app.
 
 ## Reporting a problem
 
diff --git a/README.ar.md b/README.ar.md
index e71a120..17ec45d 100644
--- a/README.ar.md
+++ b/README.ar.md
@@ -62,6 +62,12 @@
 
 **فتح ملف مباشرة:** اسحب ملف التحديث أو الصورة وأفلته على البرنامج، أو شغّل `FastbootStudio.exe ota.zip`.
 
+**سياسة توقيع الكود (Code signing policy):** في [CODE_SIGNING.md](CODE_SIGNING.md). التوقيع مجاني من
+[SignPath.io](https://about.signpath.io) والشهادة من [SignPath Foundation](https://signpath.org)
+(الطلب مقدّم، والنسخ غير موقّعة لين يوافقون).
+
+**الخصوصية:** البرنامج ما يرسل أي معلومات لأي نظام على الشبكة إلا إذا طلب ذلك المستخدم أو من يثبّته أو يشغّله.
+
 ---
 
 <a id="الأقسام"></a>
diff --git a/README.md b/README.md
index 240955b..8bfc3e7 100644
--- a/README.md
+++ b/README.md
@@ -71,6 +71,13 @@ included. You only need the phone's USB driver installed in Windows
 An OTA or image can be opened straight away: `FastbootStudio.exe ota.zip`, or drop the
 file onto the exe.
 
+**Code signing policy:** see [CODE_SIGNING.md](CODE_SIGNING.md). Free code signing provided by
+[SignPath.io](https://about.signpath.io), certificate by [SignPath Foundation](https://signpath.org)
+(applied for; releases are unsigned until it is approved).
+
+**Privacy:** this program will not transfer any information to other networked systems unless
+specifically requested by the user or the person installing or operating it.
+
 ---
 
 <a id="pages"></a>