Touch policy: strictly opt‑in