Add privacy policy

[diveshuttam]

after #1

Add privacy policy.

• link to this source code.
• clause that we don't save the tokens.
• clause that we do use the tokens once to get the name of user to be logged on /users page.
• we don't use token after this.