docs: Update Privacy Policy to include CSP info

.gitignore

@@ -13,3 +13,6 @@ node_modules/
 # NPM debug logs
 npm-debug.log*
 yarn-debug.log*
+
+# Privacy Policy Word Doc
+_privacy-policy.docx

src/privacy-policy.njk

@@ -9,7 +9,7 @@ isLandingPage: false
 <div class="module">
     <h1>Privacy Policy - dlseitz.dev</h1>
 
-    <strong>Last updated: August 25, 2025</strong>
+    <strong>Last updated: September 7, 2025</strong>
 
     <p>This <strong>Privacy Policy</strong> describes my policies and procedures on the collection and use of your information when you use my Service. I use your personal data to communicate with you regarding your inquiries.</p>
 
@@ -88,7 +88,7 @@ isLandingPage: false
     </section>
     <section id="data-protection">
         <h2>How I Protect Your Information</h2>
-        <p>I have implemented reasonable technical and organizational security measures to protect your personal data. Your information is transmitted from the contact form using <a href="https://developers.google.com/search/docs/crawling-indexing/https" target="_blank" rel="noopener noreferrer">HTTPS encryption</a>, which is enforced by default on this .dev domain.</p>
+        <p>I have implemented reasonable technical and organizational security measures to protect your personal data. A <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy" target="_blank" rel="noopener noreferrer">Content Security Policy (CSP)</a> is used to ensure your submitted data is only ever sent to my server, protecting it from being redirected to any other location. Your information is transmitted from the contact form using <a href="https://developers.google.com/search/docs/crawling-indexing/https" target="_blank" rel="noopener noreferrer">HTTPS encryption</a>, which is enforced by default on this .dev domain.</p>
         <p>Submitted data undergoes multiple security checks to prevent spam and abuse, including the use of <a href="https://www.hcaptcha.com/" target="_blank" rel="noopener noreferrer">hCaptcha</a> and rate limiting to verify the user is a human and minimize the risk of unauthorized access to stored data. The data is also validated and sanitized to ensure its integrity before it is stored in my database.</p>
         <p>However, security is an ongoing practice, and no method of electronic transmission or storage is ever absolutely secure. While I strive to protect your data, I cannot guarantee its absolute security.</p>
     </section>