Replace all bare info@ occurrences with a click-to-reveal pattern: - New EmailLink React component (base64 decode on click, never in DOM pre-click) - privacy, terms, refund pages use EmailLink - contact/index.html uses a vanilla JS button with the same pattern - PaymentForm mailto builder uses atob() to keep email out of source literals Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>