Privacy policy

Draft — not yet final.