Add Privacy policy to be fully GDPR-compliant

See https://popupsmart.com/blog/is-google-analytics-gdpr-compliant.
The GA property is already tweaked to provide the least possible identifiable info and uses anonymous IP's, but:

- Privacy policy must explicitly mention usage of GA
- Add link in cookie banner to privacy policy