Patch 08-10

• The mailing list is a real handshake. One mail comes back, and only an address that opened the link in it can ever be written to. There is an unsubscribe page too, which is a strange thing to finish before the first mail — better strange than late. Under it, the whole site moved onto a database: the privacy note promises an address gets deleted, and you cannot delete one line out of an append-only file without rewriting the file.
• NEW: choose who walks together. Twelve heroes, three seats, 220 parties. Pick yours on the site and see which trios everyone else would send down the road. It stores totals and nothing else — no id, no cookie, no address of any kind. Your browser remembers your own last three.
• NEW: a door that goes the other way. Send an idea. Leave an address only if you want an answer — and that address never joins the mailing list. Answers get published in the open, in pairs, with no counts and no "under consideration" badges.
• The site's pictures are rendered by the test suite, from the game's own painters — including a share card whose lettering is drawn as a pixel font on the scene's grid. A game made of code-drawn pixels shouldn't advertise itself in a system typeface.
• In the game itself, exactly three words changed: card became legacy. That one was mine getting out.

Kept rough on purpose: the arrivals counter in the footer counts browsers, not people, and anyone determined can inflate it. The only real fix is remembering who visits, which is the thing it exists to avoid.