Privacy policy

Short, plain, GDPR-compliant.