diff --git a/html/priv.ejs b/html/priv.ejs
index 7a80fe9d..69ced7fe 100644
--- a/html/priv.ejs
+++ b/html/priv.ejs
@@ -367,9 +367,7 @@
 Poke Maps uses <a href="https://www.openstreetmap.org/" target="_blank" rel="noopener">OpenStreetMap</a> data. That means when you explore maps at <a href="/map">/map</a>, we embed OSM via an <strong>iframe</strong> directly into the Poke site. The tiles and geographic info are delivered from OSM contributors’ servers.
 While Poke itself doesn’t collect any of your data, OpenStreetMap’s tile servers have their own <a href="https://wiki.osmfoundation.org/wiki/Privacy_Policy" target="_blank" rel="noopener">privacy policy</a>.  
 </p>
-<p>
-TL;DR: we still don’t know who you are, but since it’s an embedded iframe, map tile requests go to OSM’s infrastructure and may be logged in basic form (like request counts) to keep their servers running.
-</p>
+ 
 </section>
 
     <!-- Third parties -->
@@ -383,23 +381,29 @@ TL;DR: we still don’t know who you are, but since it’s an embedded iframe, m
       </p>
     </section>
 
-    <!-- Legal bases -->
-    <section id="legal-bases" class="policy">
-      <h2>Legal Bases for Processing (GDPR)</h2>
-      <ul>
-        <li><strong>Legitimate interests:</strong> Operating a secure, reliable service while collecting no personal data.</li>
-        <li><strong>Consent:</strong> If a future optional feature needs info, we’ll ask first and explain why.</li>
-        <li><strong>Legal obligation:</strong> If the law requires us to act, we provide only what we actually have (which is essentially nothing personal by default).</li>
-      </ul>
-    </section>
+<!-- Legal bases -->
+<section id="legal-bases" class="policy">
+  <h2>Legal Bases for Processing (GDPR)</h2>
+  <ul>
+    <li><strong>Legitimate interests:</strong> Running Poke smoothly while collecting exactly zero personal data.</li>
+    <li><strong>Consent:</strong> If we ever invent an optional feature that needs info, we’ll ask. But right now? There’s nothing to consent to.</li>
+    <li><strong>Legal obligation:</strong> Even if someone waves a fancy piece of paper at us, we literally have nothing personal to hand over. Empty pockets.</li>
+ 
+</section>
 
-    <!-- Your rights -->
-    <section id="your-rights" class="policy">
-      <h2>Your Privacy Rights</h2>
-      <p>
-        We simply don’t keep personal data. 
-      </p>
-    </section>
+
+ <!-- Your rights -->
+<section id="your-rights" class="policy">
+  <h2>Your Privacy Rights</h2>
+  <p>
+    Since Poke doesn’t collect or store personal data, there’s basically nothing for us to give, sell, or lose about you. 
+    You don’t have to worry about “export my data” or “delete my profile” requests because we don’t have anything on you in the first place.
+  </p>
+  <p>
+    Poke Accounts don’t require an email, name, or any other identifying info — and there’s no way to add that kind of data even if you wanted to. 
+   </p>
+ 
+</section>
 
     <!-- Retention -->
     <section id="retention" class="policy">