I took a look at the privacy policy (I’m fun at parties). I am happy to see that you clearly state that you don’t trade/sell personal information. But what about aggregated anonymized data? Also, good point on stating that analytics are enabled only with cookies. I’d suggest you add a method for communication on point 6 (yes the email is at the bottom of the text, but it feels like it should be also there).

Sorry if this comes through as antagonistic, it really isn’t the case, I know writing those policies is hard even with the best intentions and I’m just offering a second pair of eyes on it. Look at this as (hopefully) “constructive feedback” :)