docs: lead with library safety in the README and website

README.md

@@ -13,7 +13,9 @@
 
 Prompuff is a small desktop app for the prompts that actually worked. Save them, tag them, fill in their `{{variables}}`, copy the result, and keep a note on why each one worked. Every saved change becomes a version you can read back or restore.
 
-Your prompts stay on your machine. There is no account, no cloud and no telemetry.
+Your prompts stay on your machine. There is no account, no cloud and no telemetry, and the only thing Prompuff asks the internet is whether there's a new version.
+
+Your library outlasts every update. Prompuff backs it up before an update changes it and once a day, and every later version opens a library from any earlier release.
 
 The website, [hazeliscoding.github.io/prompuff](https://hazeliscoding.github.io/prompuff/), has the launch video and a download for every platform.
 

ROADMAP.md

@@ -242,7 +242,7 @@ These need no release. Each lands as its own pull request whenever it's ready, a
 - [ ] A Microsoft Store listing for the signed `Prompuff-Setup.exe`. The owner registers the free individual developer account.
 - [ ] The official MCP Registry lists the server as `io.github.hazeliscoding/prompuff`, with whatever package entry the registry needs, and says it comes with the Prompuff app. Glama and awesome-mcp-servers follow.
 - [ ] Submissions to awesome-claude-code (open to repos 14 days old, so from 2026-10-21), awesome-avalonia, Awesome-Prompt-Engineering and awesome-privacy.
-- [ ] The README and the website lead with what rival apps got wrong: a backup before every update, a library every later version opens, and no network beyond the update check.
+- [x] The README and the website lead with what rival apps got wrong: a backup before an update changes the library, a library every later version opens, and no network beyond the update check.
 - [ ] Check that a fresh download of `Prompuff-Setup.exe` no longer gets SmartScreen's "unrecognized app" warning, now that the certificate has had time to build reputation.
 
 **Done when:** `winget install Prompuff` installs the signed build, and Prompuff is listed in the Microsoft Store and the MCP Registry.

site/index.html

@@ -81,7 +81,7 @@ <h1 class="hero-title">
           <span class="hero-name">Prompuff<span class="visually-hidden">:</span></span>
           <span class="hero-pitch">A local-first home for prompts worth keeping.</span>
         </h1>
-        <p class="hero-text">Save the prompts that worked, fill in their <code class="var">{{variables}}</code> and copy the result. Every saved change becomes a version you can read back or restore. Your prompts stay on your machine: no account, no cloud, no telemetry.</p>
+        <p class="hero-text">Save the prompts that worked, fill in their <code class="var">{{variables}}</code> and copy the result. Every saved change becomes a version you can read back or restore. Your prompts stay on your machine: no account, no cloud, no telemetry. Updates back up your library before they change it.</p>
         <div class="cta">
           <a class="button button-primary" id="get" href="#download" data-desktop-only>
             <svg class="icon icon-download" viewBox="0 0 24 24" aria-hidden="true"><path d="M 21 15 v 4 a 2 2 0 0 1 -2 2 H 5 a 2 2 0 0 1 -2 -2 v -4"/><path class="icon-arrow" d="M 7 10 L 12 15 L 17 10 M 12 15 L 12 3"/></svg>