diff --git a/docs/operations.md b/docs/operations.md
index cd5f383..6514fbc 100644
--- a/docs/operations.md
+++ b/docs/operations.md
@@ -153,7 +153,7 @@ The app checks `https://dl.byre.run/appcast.xml` for updates (see "Updates" in `
 
 byre.run and byre.team are registered at Porkbun, with Cloudflare as their DNS, in the Cloudflare account `cloudflare@flamingcow.io`.
 
-- `https://byre.run/` (and `www.byre.run`) is the Cloudflare Pages project `byre`: `site/index.html`, with `mac/icon.svg` and the fonts from `mac/fonts/`. `site/deploy.sh` stages those files and publishes them with `wrangler pages deploy`. Releases don't redeploy it; its download link is `https://dl.byre.run/byre.dmg`, which each release replaces.
+- `https://byre.run/` (and `www.byre.run`) is the Cloudflare Pages project `byre`: `site/index.html`, with `mac/icon.svg`, `icon.png` (rendered from it at 180×180 with `rsvg-convert`, the favicon for browsers without SVG favicons and the apple-touch-icon) and the fonts from `mac/fonts/`. `site/deploy.sh` stages those files and publishes them with `wrangler pages deploy`. Releases don't redeploy it; its download link is `https://dl.byre.run/byre.dmg`, which each release replaces.
 - `https://dl.byre.run/` is the R2 bucket `byre`'s custom domain, holding what `mac/release.sh` uploads (see "Releases").
 - byre.team, and every path on it, redirects to `https://byre.run/` through a redirect rule on its zone (Rules → Redirect Rules in the dashboard), over proxied `AAAA 100::` records for `byre.team` and `www.byre.team`.
 
diff --git a/site/deploy.sh b/site/deploy.sh
index 880d878..67831fb 100755
--- a/site/deploy.sh
+++ b/site/deploy.sh
@@ -9,6 +9,7 @@ export CLOUDFLARE_API_TOKEN CLOUDFLARE_ACCOUNT_ID
 stage=$(mktemp -d)
 trap 'rm -rf "$stage"' EXIT
 cp "$site/index.html" "$mac/icon.svg" "$stage/"
+rsvg-convert --width 180 --height 180 --output "$stage/icon.png" "$mac/icon.svg"
 mkdir "$stage/fonts"
 cp "$mac"/fonts/*.woff2 "$stage/fonts/"
 npx --yes wrangler@4.151.2 pages deploy "$stage" --project-name byre --branch main --commit-dirty=true
diff --git a/site/index.html b/site/index.html
index 87b42f9..24c0a7a 100644
--- a/site/index.html
+++ b/site/index.html
@@ -5,7 +5,9 @@
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>byre</title>
 <meta name="description" content="Run many coding agents in parallel on one Mac, each on its own branch, with a lead agent that keeps track of them for you, and drive them from every Mac you use.">
+<link rel="icon" href="/icon.png" type="image/png" sizes="180x180">
 <link rel="icon" href="/icon.svg" type="image/svg+xml">
+<link rel="apple-touch-icon" href="/icon.png">
 <style>
 @font-face {
 	font-family: "Atkinson Hyperlegible Mono";