# Third-Party Notices

This inventory covers the Publisher Reach 1.0.0 distribution.

## Google Preferred Sources service

Publisher Reach can use Google's externally hosted Preferred Sources library:

- URL: `https://news.google.com/swg/js/v1/publisher.js`
- Purpose: render or invoke Google's interactive Preferred Sources flow in native/manual mode.
- Distribution: not copied into or redistributed with Publisher Reach.
- Terms: https://policies.google.com/terms
- Privacy: https://policies.google.com/privacy
- Integration documentation: https://developers.google.com/search/docs/appearance/preferred-sources

Deeplink mode links to `https://www.google.com/preferences/source?q=<domain-or-subdomain>` and does not load the library on the source page.

Google, Google Search, and related marks are trademarks of Google LLC. Publisher Reach is independent software and is not affiliated with, sponsored by, or endorsed by Google.

## Brand assets

Publisher Reach bundles Google's unmodified Preferred Sources button assets:

- Source: `https://services.google.com/fh/files/helpcenter/google_preferred_source_badge_all_languages.zip`
- Documentation: `https://developers.google.com/search/docs/appearance/preferred-sources`
- Archive SHA-256: `f6829b8e76a42d026dce886a3f738f3969bd076ea0ac9684329dbdbec7d36442`
- Creator: Google LLC
- License: Creative Commons Attribution 4.0 International (`CC BY 4.0`)
- License URL: `https://creativecommons.org/licenses/by/4.0/`
- Purpose: Google expressly supplies these assets for publishers to place on their websites as Preferred Sources buttons.

The 68 PNGs cover 17 supplied languages, light/dark artwork, and standard/Retina variants. Publisher Reach renames files for deterministic local lookup but does not alter their image bytes, wording, colors, or composition. The complete source record is distributed at `resources/google-preferred-source-badges/SOURCE.txt`.

Creative Commons licensing does not grant trademark rights. The badges are used only for their documented Preferred Sources purpose and do not imply affiliation, sponsorship, endorsement, or official status. No Google font or copied Google JavaScript is bundled.

## Bundled dependencies

The distributed PHP is original Publisher Reach code and has no bundled PHP library dependency. Generated JavaScript is compiled only from the human-readable Publisher Reach files under `src/`, with dependency bundling disabled. Generated CSS is compiled only from Publisher Reach styles. Other than the attributed Google badge PNGs above, no third-party runtime library, image, font, or generated third-party asset is bundled. Development-only build and test packages are named in `package-lock.json` but their code is not distributed.
