Privacy Policy

TODO: draft before launch. Cover analytics (Plausible), email capture, and GDPR cookie-consent requirements once ads/affiliate links go live.