Privacy policy

Draft text — not legally complete yet

Placeholder for Fase 0. Before launch this needs a full, site-specific privacy policy (GDPR): which data we process (including via ads/analytics), for what purpose, for how long, and what rights visitors have.