Privacy policy is definitely required. You could maybe get past the requirement of an imprint by arguing this isn't "geschäftsmäßig" (lacks a proper translation

Privacy policy is definitely required. You could maybe get past the requirement of an imprint by arguing this isn't "geschäftsmäßig" (lacks a proper translation; superset of commercial), but I think that would be a hard sell.