Build a privacy policy for mybinder.org

[yuvipanda]

Related to #66

We should have a strong privacy policy that doesn't burden us too much, while still offering users a reasonable amount of privacy.

I consider https://wikimediafoundation.org/wiki/Privacy_policy/FAQ and https://wikimediafoundation.org/wiki/Privacy_policy to be somewhat of gold standards in this case. However, they're all probably too burdensome for someone like us, without the resources of the Wikimedia Foundation. As one example, we'll probably have to use Google Analytics rather than roll our own. We can still try to protect user's privacy tho - by opting out of GA's data sharing, respecting DNT headers, not storing IP info past a few days, etc.

[yuvipanda]

It could just be a simple set of principles to start with, and i think it'll be fairly basic for mybinder. Need not be an iron clad legal document for now.

[willingc]

Perhaps it would be good to combine #66 and #39 with this issue and treat them as one issue since they are all privacy/tracking/anti-abuse related.

[choldgraf]

I'm +1 to that - if we can get a first start with each of these issues then that'd be a great first step. Having all in one place may make it easier to discuss. We could also open up another issue for a more long-term discussion on this once initial additions are merged.