[legal] — final privacy policy required from counsel before launch. Will include sections
for: information collected, cookies and analytics, third-party sharing, HIPAA Notice of Privacy Practices
(linked from `/hipaa-compliance/`), data retention, user rights, contact for privacy concerns, and
California (CCPA) + Nevada (NRS 603A) disclosures.