Privacy
Placeholder legal shell in the new app. Source copy remains in `docs/legal/privacy.md` and the old `src/` pages.
The rebuild keeps privacy-sensitive access inside Worker loaders/actions and keeps secrets on `context.cloudflare.env`.
Final legal copy should be ported once the new route skeleton reaches feature parity with the current deploy.