Privacy policy

[Draft, to be written before launch]