diff --git a/src/css/base/fonts.css b/src/css/base/fonts.css
index 77f055b..fd7de9c 100644
--- a/src/css/base/fonts.css
+++ b/src/css/base/fonts.css
@@ -12,6 +12,22 @@
   font-weight: 700;
 }
 
+@font-face {
+  font-family: "Quantico";
+  src: url("/fonts/Quantico-BoldItalic.woff2") format("woff2");
+  font-display: swap;
+  font-style: italic;
+  font-weight: 400;
+}
+
+@font-face {
+  font-family: "Quantico";
+  src: url("/fonts/Quantico-Italic.woff2") format("woff2");
+  font-display: swap;
+  font-style: italic;
+  font-weight: 400;
+}
+
 @font-face {
   font-family: "Silkscreen";
   src: url("/fonts/Silkscreen-Regular.woff2") format("woff2");
diff --git a/src/css/base/global.css b/src/css/base/global.css
index fe8be45..4c09f28 100644
--- a/src/css/base/global.css
+++ b/src/css/base/global.css
@@ -60,6 +60,12 @@ attic-app {
     & a {
       color: currentColor;
     }
+
+    & p small {
+      column-gap: 10px;
+      display: flex;
+      flex-wrap: wrap;
+    }
   }
 
   & > main {
diff --git a/src/css/base/typography.css b/src/css/base/typography.css
index a7cacc9..c9207d9 100644
--- a/src/css/base/typography.css
+++ b/src/css/base/typography.css
@@ -29,3 +29,11 @@ a:where([href]) {
     color: rgb(var(--color-light-yellow));
   }
 }
+
+:is(b, strong) {
+  font-weight: 700;
+}
+
+:is(i, em) {
+  font-style: italic;
+}
diff --git a/src/routes/+layout.svelte b/src/routes/+layout.svelte
index d5697c0..79b7822 100644
--- a/src/routes/+layout.svelte
+++ b/src/routes/+layout.svelte
@@ -20,10 +20,18 @@
 <footer>
   <p>
     <small>
-      &copy; Copyright 2026
+      &copy; Copyright {new Date().getFullYear()}
       <a href="https://dbushell.com" rel="noopener noreferrer" target="_blank"
         >David Bushell</a
       >
+      <span aria-hidden="true">&bull;</span>
+      <a href="/privacy">privacy</a>
+      <span aria-hidden="true">&bull;</span>
+      <a
+        href="https://tangled.org/dbushell.com/attic.social/"
+        rel="noopener noreferrer"
+        target="_blank">source</a
+      >
     </small>
   </p>
 </footer>
diff --git a/src/routes/privacy/+page.svelte b/src/routes/privacy/+page.svelte
new file mode 100644
index 0000000..8466670
--- /dev/null
+++ b/src/routes/privacy/+page.svelte
@@ -0,0 +1,36 @@
+<h1>Privacy policy</h1>
+<p><strong>Last updated:</strong> 2026-03-08</p>
+
+<p>This policy explains how Attic respects your privacy and security.</p>
+
+<h2>Personal data</h2>
+
+<p>
+  Attic does not store your personal data. If you sign in and use Attic, data is
+  stored on your chosen Personal Data Server (PDS). Attic uses AT Protocol
+  services on your behalf to manage data on your PDS. Data submitted to and
+  retrieved from your PDS is publicly visible. Please refer to the <em
+    >Terms of Service</em
+  >
+  and <em>Privacy Policy</em> of your PDS before using Attic.
+</p>
+
+<h2>Cookies</h2>
+
+<p>
+  No cookies are used unless you sign in. Attic uses only essential functional
+  cookies to manage OAuth authorization and signed in user sessions. No
+  3rd-party cookies are used. No cookies are used for analytics or tracking.
+</p>
+
+<h2>Policy changes</h2>
+
+<p>
+  Changes to the Attic privacy policy will be published at the following URL:
+</p>
+
+<p>
+  <code>https://attic.social/privacy</code>
+</p>
+
+<p>The page has a "Last updated" date at the top.</p>