Apple and Google browser callbacks show a responsive Snag page with the existing landing logo, cream/navy/carmine styling, light/dark appearance and a prominent return button. The fixed native deep link and app-side completion checks remain. This is not a success receipt. No callback values or personal data enter markup. CSS is CSP-hashed; scripts are blocked and logo requests are same-origin only.

Backend PR: https://github.com/snag-tcg/tcg-collector-backend/pull/623. Focused OAuth SQL tests: 31 passed. Full API build/tests pass; counts are recorded on the PR. Logo availability checked HTTP 200. Requires API deployment, no migration or Apple Return URL edit. The public OAuth host must keep serving /img/logo-snag.png. No homepage change, native-session rewrite, deployment, emulator or account mutation. Safari visual/login validation pending.