@ruari My sole public-facing website is a GPX file visualiser. When I made it public I added a privacy statement:

"Privacy: I don't set any cookies, or store any data. All processing is done in your browser so I have no access to your routes "

It's easy, unless you come from the position that screwing fractional cents out of every page load is a business model