Privacy policy

TODO: Replace with final legal copy. This page exists for production routing and will be wired to cookie consent + analytics controls.