Your website must have a privacy policy describing the information collected, its use, the parties to whom it is disclosed, the method of disclosure, and the security practices in place to safeguard this information.

Okay.
My website does not collect any information. I don't use any because I don't collect any. I don't disclose any to anyone because I don't collect any. There's no method of disclosure because I don't collect any. There are no security measures in place to protect the information I don't collect.

I use Matomo to track visitors and pages visited, and they collect general location, device, OS, etc, I have no control over, but they provide it if I want to know it. Whatever your browser is set to tell when asked. I get to see country, region if any, likely language, pages visited in order and times on them, and screen size.
I use a generic newsletter script, it keeps your email address when you sign up for it in IONOS's systems. No one gets to buy that, or see that. I've never heard of a webhosting company being hacked and some hosted site's newsletter account email list being the target.
The server tracks your cookie to see if you've signed in, if you're a member. I don't get to see that, there's no other information in the cookie.