Privacy

TODO: what is transmitted and stored, anonymous device identifier, retention, deletion requests. Useful for developers writing their own privacy policy.