diff --git a/templates/privacy.html b/templates/privacy.html
new file mode 100644
index 0000000..d04bc56
--- /dev/null
+++ b/templates/privacy.html
@@ -0,0 +1,21 @@
+{% extends 'lib/layout.html' %}
+{% block body %}
+
+<section>
+{% include "lib/greet.html" %}
+</section>
+
+<section>
+<h2>Pledge & Privacy Policy</h2>
+<p>Forget does not post, follow, or do anything with your account other than its job: deleting posts. For it to function, Forget needs to retrieve and store some metadata about each of your posts:</p>
+<ul>
+    <li>A unique post identifier</li>
+    <li>The post's time and date of publishing</li>
+    <li>Whether the post has any media attached</li>
+    <li>Whether the post has been favourited by you</li>
+    <li>(Mastodon only) Whether the post is a direct message</li>
+</ul>
+<p>No other post metadata and no post contents are stored by Forget.</p>
+</section>
+
+{% endblock %}