Privacy Policy

TODO: describe what data we collect and why.