diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index 76a0b566..2c7b5456 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -34,6 +34,7 @@
 - Expanded the beta privacy draft to disclose Cloudflare data transit, notification and Live Activity payload contents, and the lack of automatic upload cleanup.
 - Clarified that the local gateway does not make Codex workflows offline: prompts, conversation context, and selected attachments can still be processed by OpenAI, while Cloudflare and Apple process data only for the enabled tunnel and notification workflows.
 - Added a consistent fictional-data capture brief and full-resolution acceptance checklist for the approved public beta screenshot set.
+- Aligned the App Store screenshot checklist with the same fictional demo data and removed guidance that could expose a real local Mac path or local-web session detail.
 - Added a public beta data-flow map showing what stays on the Mac and what can be processed by Codex, OpenAI, Cloudflare, or Apple.
 - Clarified that iPhone access depends on an awake, online Mac running the gateway and Cloudflare Tunnel, with no hosted relay or remote wake promise in the current beta.
 - Added FAQ and installation guidance for upload retention and safe account switching during active turns.
diff --git a/metadata/screenshots/README.md b/metadata/screenshots/README.md
index 89cd6406..e8cd63e5 100644
--- a/metadata/screenshots/README.md
+++ b/metadata/screenshots/README.md
@@ -8,13 +8,13 @@ Prepare approved screenshots for:
 
 - First connection screen with the Cloudflare connection choice.
 - Gateway health or setup status after a successful connection.
-- Total-credit status with synthetic account names and balances.
+- Total-credit status with synthetic `Work`, `Personal`, and `Demo` account names and balances.
 - Total Credit Live Activity on a supported Lock Screen or Dynamic Island.
-- Thread list or active turn view.
-- File preview from a local Mac path.
-- Local Mac web page opened through the gateway.
+- Thread list or active turn view using the fictional threads from `docs/SCREENSHOTS.md`.
+- File upload or preview using `sample-diff.txt` or `wireframe.png`, with any path hidden or replaced by a generic example.
+- Purpose-built demo web page opened through the gateway, with no local URL, session URL, source code, logs, paths, or query values visible.
 - Error recovery state with non-sensitive copy.
 
 Do not include Remote Desktop in the 0.1 screenshot set while its paired-device and session-authorization protections remain release-blocked.
 
-All screenshots must avoid real tokens, private hostnames, private account names, private file paths, private emails, and personal identifiers.
+All screenshots must avoid real tokens, private hostnames, private account names, private file paths, private emails, and personal identifiers. Follow the complete fictional capture brief and full-resolution acceptance checklist in [`docs/SCREENSHOTS.md`](../../docs/SCREENSHOTS.md) before committing or attaching an image.