Data minimization
The site should collect only data needed for a defined purpose. A contact form must not claim success unless a real approved submission endpoint is connected.
Analytics
If analytics are enabled, this policy must match the actual product, consent configuration, and retention settings.
Third-party links
External sites have their own privacy practices.
Revised for the Astro 7 migration · October 2026