Privacy policies are entirely voluntary. No one validates them, they are meaningless.
Edit: For anyone who thinks this is wrong, feel free to explain your reasoning. I have written two privacy policies for 2 separate apps, neither of them realistically restrict what I can do with the data that I manage. All google and discord care about is that the policy exists, they don't verify that I am following them. Anyone with malicious intent isnt going to be affected by a privacy policy.