Privacy policy

The GDPR requires us to publish a privacy policy.