add umami and seo tags

src/routes/(app)/privacy/+page.svelte

@@ -0,0 +1,71 @@
+<svelte:head>
+	<title>Privacy Policy — Vash Esports</title>
+	<meta name="description" content="Privacy Policy for Vash Esports." />
+</svelte:head>
+
+<div class="prose prose-invert mx-auto max-w-3xl">
+	<h1>Privacy Policy</h1>
+	<p class="text-text-secondary text-sm">Last updated: {new Date().getFullYear()}</p>
+
+	<h2>1. Information We Collect</h2>
+	<p>When you use Vash Esports, we collect:</p>
+	<ul>
+		<li>
+			<strong>osu! account data</strong> — your osu! username, user ID, and profile information
+			provided via osu! OAuth
+		</li>
+		<li>
+			<strong>Tournament data</strong> — match results, scores, and team membership you create or
+			participate in
+		</li>
+		<li>
+			<strong>Usage analytics</strong> — anonymized page views and interactions via Umami, a
+			privacy-focused analytics tool. No cookies are used and no personal data is collected.
+		</li>
+	</ul>
+
+	<h2>2. How We Use Your Information</h2>
+	<ul>
+		<li>To provide and operate the Service (tournament management, matchmaking, scoring)</li>
+		<li>To display your username and profile in matches, leaderboards, and team pages</li>
+		<li>To communicate with you about your matches via osu! IRC</li>
+		<li>To improve the Service through aggregated analytics</li>
+	</ul>
+
+	<h2>3. Data Sharing</h2>
+	<p>
+		We do not sell or share your personal data with third parties, except as required by law.
+		osu! account data is obtained via osu!'s OAuth API and subject to
+		<a href="https://osu.ppy.sh/legal/privacy" target="_blank" rel="noopener">osu!'s Privacy Policy</a
+		>.
+	</p>
+
+	<h2>4. Data Retention</h2>
+	<p>
+		Your account and tournament data are retained for as long as your account is active or as needed
+		to provide the Service. You may request deletion of your data by contacting us.
+	</p>
+
+	<h2>5. Cookies</h2>
+	<p>
+		We use a single session cookie for authentication. Our analytics (Umami) are cookieless and do
+		not track you across sites.
+	</p>
+
+	<h2>6. Your Rights (GDPR)</h2>
+	<p>If you are in the EU/EEA, you have the right to:</p>
+	<ul>
+		<li>Access the personal data we hold about you</li>
+		<li>Request correction or deletion of your data</li>
+		<li>Object to or restrict processing of your data</li>
+		<li>Data portability</li>
+	</ul>
+	<p>To exercise these rights, contact us at the address below.</p>
+
+	<h2>7. Contact</h2>
+	<p>
+		For privacy questions or data requests, contact:
+		<!-- TODO: add contact email -->
+		<a href="mailto:contact@vash.software">contact@vash.software</a>
+	</p>
+</div>