Add privacy and terms pages

src/routes/privacy/+page.svelte

@@ -0,0 +1,39 @@
+<svelte:head><title>Privacy · stanrunge.dev</title></svelte:head>
+
+<article class="mx-auto max-w-2xl space-y-4 px-6 py-10 leading-relaxed">
+	<h1 class="text-2xl font-bold">Privacy</h1>
+	<p class="text-sm opacity-70">Last updated 24 October 2026</p>
+	<p>
+		stanrunge.dev is a personal website run by Stan Runge in the Netherlands. This page explains
+		what personal data it handles and why.
+	</p>
+	<h2 class="pt-2 text-lg font-semibold">Accounts</h2>
+	<p>
+		If you register, the site stores your name, email address, and the sign-in methods you link
+		(such as Google or osu!), so you can log in. If you use a password, only a secure hash of it is
+		stored. Session cookies keep you signed in; there are no advertising or third-party tracking
+		cookies.
+	</p>
+	<h2 class="pt-2 text-lg font-semibold">Bank data (money tracker)</h2>
+	<p>
+		The money tracker is a private tool used only by the site owner. With the account holders'
+		explicit consent, it reads account details, balances and booked transactions from Revolut
+		through Enable Banking Oy, a licensed account information service provider. This data is used
+		only to show the account holders their own finances. It is stored in a database on a server
+		controlled by the site owner, is never sold or shared, and consent can be withdrawn at any time
+		in the bank app or by asking the site owner, after which no further data is fetched. Access is
+		limited to read-only account information; no payments can be made.
+	</p>
+	<h2 class="pt-2 text-lg font-semibold">Hosting and logs</h2>
+	<p>
+		The site is self-hosted. Web server logs (IP address, time, requested page) are kept briefly for
+		security and troubleshooting. Backups are encrypted.
+	</p>
+	<h2 class="pt-2 text-lg font-semibold">Your rights</h2>
+	<p>
+		Under the GDPR you can ask to see, correct, export or delete your data, or object to its use.
+		Contact the site owner to do so. You may also complain to the Autoriteit Persoonsgegevens.
+	</p>
+	<h2 class="pt-2 text-lg font-semibold">Contact</h2>
+	<p>Stan Runge, via the contact details on the home page of stanrunge.dev.</p>
+</article>

src/routes/terms/+page.svelte

@@ -0,0 +1,36 @@
+<script lang="ts">
+	import { resolve } from '$app/paths';
+</script>
+
+<svelte:head><title>Terms · stanrunge.dev</title></svelte:head>
+
+<article class="mx-auto max-w-2xl space-y-4 px-6 py-10 leading-relaxed">
+	<h1 class="text-2xl font-bold">Terms of use</h1>
+	<p class="text-sm opacity-70">Last updated 24 October 2026</p>
+	<p>
+		stanrunge.dev is a personal, non-commercial website by Stan Runge. By using it you agree to
+		these terms.
+	</p>
+	<h2 class="pt-2 text-lg font-semibold">Use of the site</h2>
+	<p>
+		The projects and tools here are provided as-is, for fun and personal use, without warranty of
+		any kind. They may change or disappear at any time. Don't misuse the site: no attempts to break
+		in, overload it, scrape it aggressively, or use it for anything unlawful.
+	</p>
+	<h2 class="pt-2 text-lg font-semibold">Accounts</h2>
+	<p>
+		You're responsible for activity on your account. Accounts that abuse the site may be removed.
+		You can ask for your account to be deleted at any time.
+	</p>
+	<h2 class="pt-2 text-lg font-semibold">Money tracker</h2>
+	<p>
+		The money tracker is a private tool for the site owner and household. Its bank connection is
+		read-only (account information via Enable Banking) and nothing shown in it is financial advice.
+	</p>
+	<h2 class="pt-2 text-lg font-semibold">Liability</h2>
+	<p>
+		To the extent the law allows, the site owner is not liable for any loss arising from use of the
+		site. Dutch law applies.
+	</p>
+	<p>See also the <a class="underline" href={resolve('/privacy')}>privacy page</a>.</p>
+</article>