diff --git a/web/src/lib/components/auth/AuthFooter.svelte b/web/src/lib/components/auth/AuthFooter.svelte
new file mode 100644
index 00000000..9bc9c072
--- /dev/null
+++ b/web/src/lib/components/auth/AuthFooter.svelte
@@ -0,0 +1,156 @@
+<script lang="ts">
+	// Footer rendered below the auth-page family.
+	//
+	// On Pad Cloud (cloudMode=true) this carries the full getpad.dev marketing
+	// footer link list — same canonical order as pad-web/src/routes/+layout.svelte
+	// — so the auth pages feel like one continuous property with the marketing
+	// site rather than a stripped-down stub.
+	//
+	// On self-hosted (cloudMode=false) this renders NOTHING. Operators ship
+	// Pad under their own brand and have their own legal docs; rendering
+	// getpad.dev Terms/Privacy/Sub-processors links would misrepresent the
+	// operator's legal terms as if they were the deployment's own. This
+	// matches the prior LegalFooter + SupportFooter behavior (both gated
+	// their entire body on `{#if cloudMode}`) and the brand spec
+	// (docs/brand.md §7) note that an operator-owned legal/footer
+	// mechanism is deferred to the operator-branding follow-up plan.
+	//
+	// Visual contract: docs/brand.md, section 7. Source of truth for tokens,
+	// link order, and copyright format is pad-web/src/routes/+layout.svelte.
+	// When changing those, update the brand doc and this file together.
+	//
+	// Replaces the prior LegalFooter + SupportFooter pair — the brand spec
+	// describes a single footer pattern, not two separate strips.
+
+	let { cloudMode = false }: { cloudMode?: boolean } = $props();
+
+	// Canonical Cloud-mode link order from docs/brand.md §7. Do not reorder.
+	// All Cloud links are off-property (github.com or getpad.dev) so every
+	// anchor opens in a new tab — the user is mid-auth-flow and we don't want
+	// to lose their form state by navigating away.
+	const cloudLinks: Array<{ label: string; href: string }> = [
+		{ label: 'GitHub', href: 'https://github.com/PerpetualSoftware/pad' },
+		{ label: 'Docs', href: 'https://getpad.dev/docs' },
+		{ label: 'Changelog', href: 'https://getpad.dev/changelog' },
+		{ label: 'Contribute', href: 'https://getpad.dev/contribute' },
+		{ label: 'FAQ', href: 'https://getpad.dev/faq' },
+		{ label: 'Security', href: 'https://getpad.dev/security' },
+		{ label: 'Privacy', href: 'https://getpad.dev/privacy' },
+		{ label: 'Terms', href: 'https://getpad.dev/terms' },
+		{ label: 'Sub-processors', href: 'https://getpad.dev/subprocessors' }
+	];
+
+	// Year is computed once per page render — no auto-refresh, but auth pages
+	// don't sit open across a year boundary in any realistic flow.
+	const year = new Date().getFullYear();
+</script>
+
+{#if cloudMode}
+	<footer class="auth-footer cloud">
+		<div class="auth-footer-row">
+			<p class="auth-footer-copyright">
+				&copy; {year} Pad
+				<span class="auth-footer-sep" aria-hidden="true">·</span>
+				<a
+					href="https://perpetualsoftware.org"
+					target="_blank"
+					rel="noopener noreferrer"
+					class="auth-footer-perpetual"
+				>
+					Perpetual Software
+				</a>
+			</p>
+			<nav class="auth-footer-links" aria-label="Site navigation">
+				{#each cloudLinks as link (link.label)}
+					<a
+						href={link.href}
+						target="_blank"
+						rel="noopener noreferrer"
+						class="auth-footer-link"
+					>
+						{link.label}
+					</a>
+				{/each}
+			</nav>
+		</div>
+	</footer>
+{/if}
+<!-- Self-hosted (cloudMode === false) intentionally renders nothing — see
+     the doc-comment in the script block. The operator-customizable footer
+     is a separate, larger plan that will land after PLAN-900 ships. -->
+
+<style>
+	/* Cloud footer — full marketing-style strip. Matches pad-web's footer
+	   structure: a top border, max-w-6xl container, copyright line on the
+	   left and link row on the right. Stacks vertically on small screens. */
+	.auth-footer.cloud {
+		margin-top: var(--space-10);
+		border-top: 1px solid var(--border-subtle);
+		padding-top: var(--space-6);
+		width: 100%;
+	}
+
+	.auth-footer-row {
+		max-width: 72rem; /* matches max-w-6xl */
+		margin: 0 auto;
+		padding: 0 var(--space-6);
+		display: flex;
+		flex-direction: column;
+		align-items: center;
+		gap: var(--space-4);
+		text-align: center;
+	}
+
+	.auth-footer-copyright {
+		font-size: 0.875rem; /* text-sm */
+		color: var(--text-muted);
+		margin: 0;
+	}
+
+	.auth-footer-sep {
+		margin: 0 0.25rem;
+	}
+
+	.auth-footer-perpetual {
+		color: color-mix(in srgb, var(--text-muted) 60%, transparent);
+		text-decoration: none;
+		transition: color 150ms ease;
+	}
+
+	.auth-footer-perpetual:hover,
+	.auth-footer-perpetual:focus-visible {
+		color: var(--text-secondary);
+		text-decoration: none;
+	}
+
+	.auth-footer-links {
+		display: flex;
+		flex-wrap: wrap;
+		align-items: center;
+		justify-content: center;
+		column-gap: var(--space-6);
+		row-gap: var(--space-3);
+	}
+
+	.auth-footer-link {
+		font-size: 0.875rem;
+		color: var(--text-muted);
+		text-decoration: none;
+		transition: color 150ms ease;
+	}
+
+	.auth-footer-link:hover,
+	.auth-footer-link:focus-visible {
+		color: var(--text-secondary);
+		text-decoration: none;
+	}
+
+	/* sm breakpoint = 640px (Tailwind default; matches pad-web's sm:flex-row). */
+	@media (min-width: 640px) {
+		.auth-footer-row {
+			flex-direction: row;
+			justify-content: space-between;
+			text-align: left;
+		}
+	}
+</style>
diff --git a/web/src/lib/components/auth/AuthHeader.svelte b/web/src/lib/components/auth/AuthHeader.svelte
index 797f16ac..fd10beb1 100644
--- a/web/src/lib/components/auth/AuthHeader.svelte
+++ b/web/src/lib/components/auth/AuthHeader.svelte
@@ -12,7 +12,7 @@
 	//
 	// Self-hosted (cloudMode === false) renders nothing — operators ship Pad
 	// under their own brand and must not get getpad.dev chrome imposed on them.
-	// This matches the existing pattern in LegalFooter.svelte / SupportFooter.svelte.
+	// Same pattern as the companion AuthFooter.svelte in this directory.
 
 	let { cloudMode = false }: { cloudMode?: boolean } = $props();
 
diff --git a/web/src/lib/components/auth/LegalFooter.svelte b/web/src/lib/components/auth/LegalFooter.svelte
deleted file mode 100644
index 7b728f8c..00000000
--- a/web/src/lib/components/auth/LegalFooter.svelte
+++ /dev/null
@@ -1,51 +0,0 @@
-<script lang="ts">
-	// Legal links shown below the auth card on Pad Cloud (cloudMode=true).
-	// Self-hosted installs do not need these links — the Terms/Privacy that
-	// live at getpad.dev are Perpetual Software LLC's for the hosted service,
-	// not for the user's own instance.
-	//
-	// Caller typically reads cloudMode from authStore (which the root layout
-	// already populates via authStore.load()), so no additional session fetch
-	// is needed. Links open in a new tab so the auth flow is not interrupted.
-	let { cloudMode = false }: { cloudMode?: boolean } = $props();
-</script>
-
-{#if cloudMode}
-	<nav class="legal-footer" aria-label="Legal">
-		<a href="https://getpad.dev/terms" target="_blank" rel="noopener noreferrer">Terms</a>
-		<span aria-hidden="true">·</span>
-		<a href="https://getpad.dev/privacy" target="_blank" rel="noopener noreferrer">Privacy</a>
-		<span aria-hidden="true">·</span>
-		<a href="https://getpad.dev/subprocessors" target="_blank" rel="noopener noreferrer">Sub-processors</a>
-	</nav>
-{/if}
-
-<style>
-	.legal-footer {
-		margin-top: var(--space-6);
-		display: flex;
-		align-items: center;
-		justify-content: center;
-		gap: var(--space-2);
-		color: var(--text-muted);
-		font-size: 0.8rem;
-	}
-
-	.legal-footer a {
-		color: var(--text-muted);
-		text-decoration: underline;
-		text-decoration-thickness: 1px;
-		text-underline-offset: 2px;
-		border-radius: 2px;
-	}
-
-	.legal-footer a:hover {
-		color: var(--text-primary);
-	}
-
-	.legal-footer a:focus-visible {
-		color: var(--text-primary);
-		outline: 2px solid var(--accent-blue);
-		outline-offset: 2px;
-	}
-</style>
diff --git a/web/src/lib/components/auth/SupportFooter.svelte b/web/src/lib/components/auth/SupportFooter.svelte
deleted file mode 100644
index bdad00f1..00000000
--- a/web/src/lib/components/auth/SupportFooter.svelte
+++ /dev/null
@@ -1,47 +0,0 @@
-<script lang="ts">
-	// Support/help links shown below the auth card on Pad Cloud.
-	//
-	// Gated on cloudMode — the support@getpad.dev mailbox and status.getpad.dev
-	// page are for the hosted service, not for self-hosted deployments. Caller
-	// typically reads cloudMode from authStore. Links open in a new tab so
-	// clicking one mid-login does not lose the form state.
-	let { cloudMode = false }: { cloudMode?: boolean } = $props();
-</script>
-
-{#if cloudMode}
-	<nav class="support-footer" aria-label="Support">
-		<a href="mailto:support@getpad.dev">Support</a>
-		<span aria-hidden="true">·</span>
-		<a href="https://status.getpad.dev" target="_blank" rel="noopener noreferrer">Status</a>
-	</nav>
-{/if}
-
-<style>
-	.support-footer {
-		margin-top: var(--space-2);
-		display: flex;
-		align-items: center;
-		justify-content: center;
-		gap: var(--space-2);
-		color: var(--text-muted);
-		font-size: 0.8rem;
-	}
-
-	.support-footer a {
-		color: var(--text-muted);
-		text-decoration: underline;
-		text-decoration-thickness: 1px;
-		text-underline-offset: 2px;
-		border-radius: 2px;
-	}
-
-	.support-footer a:hover {
-		color: var(--text-primary);
-	}
-
-	.support-footer a:focus-visible {
-		color: var(--text-primary);
-		outline: 2px solid var(--accent-blue);
-		outline-offset: 2px;
-	}
-</style>
diff --git a/web/src/routes/forgot-password/+page.svelte b/web/src/routes/forgot-password/+page.svelte
index dc850f37..9a2f3511 100644
--- a/web/src/routes/forgot-password/+page.svelte
+++ b/web/src/routes/forgot-password/+page.svelte
@@ -3,8 +3,7 @@
 	import { api } from '$lib/api/client';
 	import { authStore } from '$lib/stores/auth.svelte';
 	import AuthHeader from '$lib/components/auth/AuthHeader.svelte';
-	import LegalFooter from '$lib/components/auth/LegalFooter.svelte';
-	import SupportFooter from '$lib/components/auth/SupportFooter.svelte';
+	import AuthFooter from '$lib/components/auth/AuthFooter.svelte';
 
 	let email = $state('');
 	let error = $state('');
@@ -100,8 +99,7 @@
 		{/if}
 	</div>
 
-	<LegalFooter cloudMode={authStore.cloudMode} />
-	<SupportFooter cloudMode={authStore.cloudMode} />
+	<AuthFooter cloudMode={authStore.cloudMode} />
 </div>
 
 <style>
diff --git a/web/src/routes/join/[code]/+page.svelte b/web/src/routes/join/[code]/+page.svelte
index cc4c14c9..8ec064fb 100644
--- a/web/src/routes/join/[code]/+page.svelte
+++ b/web/src/routes/join/[code]/+page.svelte
@@ -6,6 +6,7 @@
 	import { authStore } from '$lib/stores/auth.svelte';
 	import SetupRequiredNotice from '$lib/components/auth/SetupRequiredNotice.svelte';
 	import AuthHeader from '$lib/components/auth/AuthHeader.svelte';
+	import AuthFooter from '$lib/components/auth/AuthFooter.svelte';
 
 	let code = $derived(page.params.code ?? '');
 	let status = $state<'loading' | 'login' | 'register' | 'accepting' | 'error' | 'setup' | '2fa'>('loading');
@@ -339,11 +340,14 @@
 			</p>
 		{/if}
 	</div>
+
+	<AuthFooter cloudMode={authStore.cloudMode} />
 </div>
 
 <style>
 	.join-page {
 		display: flex;
+		flex-direction: column;
 		align-items: center;
 		justify-content: center;
 		min-height: 100vh;
diff --git a/web/src/routes/login/+page.svelte b/web/src/routes/login/+page.svelte
index 8abb0bb0..08ab1d4e 100644
--- a/web/src/routes/login/+page.svelte
+++ b/web/src/routes/login/+page.svelte
@@ -6,8 +6,7 @@
 	import { goto } from '$app/navigation';
 	import SetupRequiredNotice from '$lib/components/auth/SetupRequiredNotice.svelte';
 	import AuthHeader from '$lib/components/auth/AuthHeader.svelte';
-	import LegalFooter from '$lib/components/auth/LegalFooter.svelte';
-	import SupportFooter from '$lib/components/auth/SupportFooter.svelte';
+	import AuthFooter from '$lib/components/auth/AuthFooter.svelte';
 
 	let email = $state('');
 	let password = $state('');
@@ -391,8 +390,7 @@
 		{/if}
 	</div>
 
-	<LegalFooter {cloudMode} />
-	<SupportFooter {cloudMode} />
+	<AuthFooter {cloudMode} />
 </div>
 
 <style>
diff --git a/web/src/routes/register/+page.svelte b/web/src/routes/register/+page.svelte
index 96501c06..a8e96281 100644
--- a/web/src/routes/register/+page.svelte
+++ b/web/src/routes/register/+page.svelte
@@ -4,8 +4,7 @@
 	import { goto } from '$app/navigation';
 	import SetupRequiredNotice from '$lib/components/auth/SetupRequiredNotice.svelte';
 	import AuthHeader from '$lib/components/auth/AuthHeader.svelte';
-	import LegalFooter from '$lib/components/auth/LegalFooter.svelte';
-	import SupportFooter from '$lib/components/auth/SupportFooter.svelte';
+	import AuthFooter from '$lib/components/auth/AuthFooter.svelte';
 	import { authStore } from '$lib/stores/auth.svelte';
 
 	let name = $state('');
@@ -234,8 +233,7 @@
 		{/if}
 	</div>
 
-	<LegalFooter cloudMode={authStore.cloudMode} />
-	<SupportFooter cloudMode={authStore.cloudMode} />
+	<AuthFooter cloudMode={authStore.cloudMode} />
 </div>
 
 <style>
diff --git a/web/src/routes/reset-password/[token]/+page.svelte b/web/src/routes/reset-password/[token]/+page.svelte
index 1867af7d..240e7fbf 100644
--- a/web/src/routes/reset-password/[token]/+page.svelte
+++ b/web/src/routes/reset-password/[token]/+page.svelte
@@ -5,6 +5,7 @@
 	import { api } from '$lib/api/client';
 	import { authStore } from '$lib/stores/auth.svelte';
 	import AuthHeader from '$lib/components/auth/AuthHeader.svelte';
+	import AuthFooter from '$lib/components/auth/AuthFooter.svelte';
 
 	let token = $derived(page.params.token ?? '');
 
@@ -101,11 +102,14 @@
 			<a href="/login">Back to sign in</a>
 		</p>
 	</div>
+
+	<AuthFooter cloudMode={authStore.cloudMode} />
 </div>
 
 <style>
 	.page {
 		display: flex;
+		flex-direction: column;
 		align-items: center;
 		justify-content: center;
 		min-height: 100vh;