Privacy policy

[[TODO: privacy policy (GDPR) — to be drafted and reviewed]]