[javajosh]

It's admirable that you're aware of the risk you're placing on your users, and willing to assuage them. If you're audience is HN, you might want to simply list the 3rd party runtime components you're using (and to go one better, review their privacy notices, recursively -- I can imagine a malefactor doing a backroom deal with a component provider to get kickbacks on data being shared down the line.) I would also include any front end components in this notice, like Cloudflare or GA.

Last but not least, it would be nice to know who's behind this, because none of these assurances mean anything if you're really a malefactor. I would recommend putting a real name or two in your "About" page.

[spullara]

For it to be available in EU at all I think they will have to list all of them anyway.