Privacy policy

Placeholder — final policy lands here before launch (story S1.5).