A complete privacy policy will follow at some point in time.
Basically we gather as little info as possible about our users, with the exception of the double-opt-in newsletter list.
With regards to the comments, we require an email address to be entered. In some cases we’ve allowed users to enter in fake information in the comments email box, but that’s generally when we know who they are anyway.