chore(privacy): disable nginx access log, update hosting text

Privacy page says no visitor IPs are stored.
Hosting text now names Hostinger and its DPA.
Remove the TODO placeholders in de and en.

nginx.conf

@@ -3,6 +3,9 @@ server {
   server_name _;
   root /usr/share/nginx/html;
 
+  # No access log: no visitor IPs stored (privacy page says so)
+  access_log off;
+
   gzip on;
   gzip_vary on;
   gzip_min_length 1024;