Privacy policy

Who sees what, why, and for how long. Written from what the system actually does.