diff --git a/hugo-static/content/_index.md b/hugo-static/content/_index.md
index ea47470..d5db08d 100644
--- a/hugo-static/content/_index.md
+++ b/hugo-static/content/_index.md
@@ -21,4 +21,5 @@ and is written in Rust, with contributions from the community encouraged.
* [ Play on Android](https://play.google.com/store/apps/details?id=org.blastmud.game) (coming soon).
* [ Our theme](theme)
* [ Developer guide & source](developer)
+* [ Privacy policy](privacy)
* [ Contact staff](mailto:staff@blastmud.org)
diff --git a/hugo-static/content/menu/index.md b/hugo-static/content/menu/index.md
deleted file mode 100644
index dcf6b5d..0000000
--- a/hugo-static/content/menu/index.md
+++ /dev/null
@@ -1,11 +0,0 @@
----
-headless: true
----
-* [Welcome page](/)
-* [ Play in browser](game.html)
-* [ Play on Android](https://play.google.com/store/apps/details?id=org.blastmud.game)
-* [ Our theme](theme)
-* [ Developer guide & source](developer)
-* [ Contact staff](mailto:staff@blastmud.org)
-
-
diff --git a/hugo-static/content/privacy.md b/hugo-static/content/privacy.md
new file mode 100644
index 0000000..e4894a0
--- /dev/null
+++ b/hugo-static/content/privacy.md
@@ -0,0 +1,34 @@
+---
+menu:
+ after:
+ name: Privacy policy
+ weight: 100
+title: Privacy policy
+---
+# Privacy Policy
+
+Blastmud collects the following information that can be linked to individuals:
+* Whether or not you are over 18 years of age. This is used to ensure that
+ we do not allow you access to games which cannot be made available to you.
+ If you are under 18, the data is not retained. If you are over 18, this
+ information is retained indefinitely.
+* The IP address(es) you use to connect to Blastmud. These are used
+ to block access to Blastmud from countries where we are not confident it can be legally provided,
+ to check whether or not you are using an IP address that has been banned or restricted from the
+ service or part of it, and to apply rate limits to prevent abuse. In normal circumstances, IP
+ addresses are retained for up to 2 years, but if you are banned or restricted from the service,
+ they are retained until up to 2 years after the ban or restriction is lifted. Bans and restrictions
+ can be for an indefinite period, in which the IP address will be retained indefinitely.
+* The IP address used to request an Over 18 certificate for running your own server.
+ This will form part of the certificate issued. We keep records of all certificates issued,
+ including the IP address, so that they can be revoked if they are leaked on the Internet.
+* The email address you provide. This is retained indefinitely as an identifier for your
+ account in case you contact us in the future. However, you may contact staff@blastmud.org
+ and request that we disable your account and delete this information.
+* The character name you choose for yourself. We recommend not making this something
+ linkable to your real identity, as it will be retained indefinitely and shown in-game to
+ identify you to other players.
+* Any free-form information you disclose while playing the game (for example, through in game
+ communication functionality). Depending on the type of communication, this could be shared
+ with other players and retained indefinitely. We recommend not posting any personally
+ identifiable information through these channels.
diff --git a/hugo-static/layouts/home.html b/hugo-static/layouts/home.html
index 4deb74b..c412d16 100644
--- a/hugo-static/layouts/home.html
+++ b/hugo-static/layouts/home.html
@@ -5,6 +5,7 @@