What we send to third parties: nothing

Privacy policies are long because the situation they describe is complicated. Fonts from one company, analytics from another, a chat widget, an embedded video, a map.

Every one of those is a request carrying the visitor’s address and the page they are on to somebody the visitor has never heard of. The policy discloses it, technically, in a list nobody reads.

The alternative is not clever. Self-host the fonts. Self-host the analytics. Use a static map image or a link. Load the video only when somebody asks for it.

Then the claim becomes checkable in ten seconds. Open the network panel, sort by domain, and there is one. That is worth more than three pages of disclosure, because anybody can confirm it without trusting you.