Placeholder policy. Keep it simple: what you collect, why, retention, third-parties (hosting/email), and user rights.