privacy policy

Not yet completely written