Privacy policy

[pending] — this page needs real legal review before it ships. No policy text is published here yet.