diff --git a/wiki/pages/privacy-policy.md b/wiki/pages/privacy-policy.md
new file mode 100644
index 0000000..2724887
--- /dev/null
+++ b/wiki/pages/privacy-policy.md
@@ -0,0 +1,42 @@
+---
+author: ~ben
+published: true
+title: privacy policy
+description: tilde.team privacy policy
+category:
+  - main
+---
+
+# privacy policy
+
+tilde.team takes privacy seriously and, as such, remains committed to being in
+compliance with the GDPR, which took effect may 25, 2018.
+
+## what data do we collect from you?
+
+tilde.team collects your email address during signup and any IP addresses you
+sign in to the system from in accordance with technical requirements.
+
+we also store whatever data you create or maintain in your home directory,
+which may include mails to and from your tilde.team account.
+
+## how long do we retain data?
+
+your email address is retained only long enough to process your account
+creation and notify you of that completion. IPs are retained for a maximum of
+30 days.
+
+## how can i request a copy of my data?
+
+you can submit a request by email to
+[sudoers@tilde.team](mailto:sudoers@tilde.team). we will provide a copy of all
+your data that we store within 14 days.
+
+## how can i request removal of my information?
+
+your user data is protected by the unix permissions model. by default, in the
+sharing nature of a public access unix system, your files are visible to other
+users. you may, however, set the access however you like.
+
+contact [sudoers@tilde.team](mailto:sudoers@tilde.team) for any further
+requests.