Privacy Policy requires final review
The production policy must disclose Stripe payment processing, Cloudflare hosting, outbound-click analytics, abuse-prevention data, contact channels, and retention periods. The open decisions are listed in docs/LEGAL-COPY-BRIEF.md.