diff --git a/README.md b/README.md
new file mode 100644
index 0000000..1632e92
--- /dev/null
+++ b/README.md
@@ -0,0 +1,30 @@
+# goblin.st
+
+Static landing site for **goblin.st** — the Goblin wallet. Plain HTML/CSS, no
+build step.
+
+```
+index.html      landing page (hero is a pure-CSS phone mockup)
+privacy.html    privacy policy
+terms.html      terms of service
+styles.css      all styles
+assets/         fonts (Geist), brand marks, logos, screenshot
+```
+
+## Deploy
+
+Push-to-deploy via the Forgejo webhook on `git.us-ea.st/GRIN/goblin.st`:
+
+```
+git push origin main
+  → Forgejo webhook → https://hooks.us-ea.st/  (HMAC-SHA256 verified)
+  → deploy-hook.service on us-ea.st
+  → git -C /opt/goblin/www pull --ff-only origin main
+```
+
+The webroot `/opt/goblin/www` on `us-ea.st` is itself the git working tree, so a
+push is the whole deploy — no build, no copy. nginx serves it directly and
+denies `/.git`. NIP-05 (`/.well-known/nostr.json`) and `/api/` are proxied to
+`goblin-nip05d` and are not part of this repo.
+
+Manual deploy (on the server): `deploy-hook-trigger GRIN/goblin.st main`