Privacy policy
Draft: Describe your hosting, any analytics or embeds (fonts, CDN, forms), retention, and lawful bases.
Typically, a mostly static site may only process data your host logs for delivery and security until you add other services.
Data-subject rights (access, deletion, portability, objection, complaints to supervisory authorities) should be spelled out once processing is finalized.
Contact for privacy requests: [email or address].