Will this newfound respect for users' privacy be backed up by a contract or some other legally-enforceable commitment, or do we all have to worry about when you decide to pivot again in another couple years?

I hadn’t thought about this from a legal contract perspective. I like the idea of making our commitment enforceable. Do you have ideas of what you'd want in a contract?

Practically, you wouldn't be able to have any type of contract enforceable in court.

It would be a nice touch though.