- What personal data you process and retain (login details, access logs, statistics, etc.)
- How long you retain it
- Who (which human, name and email) to contact when you have questions
- Which third parties get the data (if you use Google fonts, Google would be one of those, since it gets the users IP), etc.
That's the sort of default stuff that must be in a privacy policy, there are a few more things that you'd need to comply with GDPR and the UK's equivalent, but that's the kind of thing you need. :)
- How long you retain it
- Who (which human, name and email) to contact when you have questions
- Which third parties get the data (if you use Google fonts, Google would be one of those, since it gets the users IP), etc.
That's the sort of default stuff that must be in a privacy policy, there are a few more things that you'd need to comply with GDPR and the UK's equivalent, but that's the kind of thing you need. :)