Production privacy text must describe analytics, contact forms, account data, dealer verification, document access and cookies actually used by the live system.