Privacy policy.

Placeholder — the full policy text still needs to be written and reviewed by the owner (see docs/TODO_OWNER.md). This page exists so the footer link resolves to something honest in the meantime.