Draft privacy policy

I'm not a lawyer but we do have to start somewhere, right?

It doesn't need to be perfect in a first draft as frankly, what we have right now (which is nothing) is likely worse than what's stated here.