diff --git a/public/_redirects b/public/_redirects
index 6176ed9..774ac48 100644
--- a/public/_redirects
+++ b/public/_redirects
@@ -8,11 +8,12 @@
 # /guides/*/ -> :splat, etc.) were removed: they contradicted 'always' and were
 # already shadowed dead by the directory assets (the slash URL serves 200).
 
-# Privacy: hard 301 directly to /privacy-policy
-# (replaces a previous Astro redirect that emitted a noindex meta-refresh stub
-#  flagged by GSC as "Excluded by 'noindex' tag")
-/privacy/                    /privacy-policy              301!
-/privacy                     /privacy-policy              301!
+# Privacy: 301 the /privacy alias to the real page. Target MUST be the
+# trailing-slash URL: Cloudflare serves the page at /privacy-policy/ (the
+# directory asset); a redirect target of /privacy-policy (no file at that exact
+# path) does not resolve and 404s, which is why the old rule never fired.
+/privacy/                    /privacy-policy/             301
+/privacy                     /privacy-policy/             301
 
 # Sitemap redirect (Astro generates sitemap-index.xml)
 /sitemap.xml                 /sitemap-index.xml           301
diff --git a/src/components/common/CookieConsent.astro b/src/components/common/CookieConsent.astro
index cd869e6..e0fb03e 100644
--- a/src/components/common/CookieConsent.astro
+++ b/src/components/common/CookieConsent.astro
@@ -22,7 +22,9 @@
         <p class="text-sm text-[var(--color-subtle)]">
           We use cookies to analyze traffic and show relevant ads. By clicking "Accept", you consent
           to our use of cookies.
-          <a href="/privacy" class="text-[var(--color-accent)] hover:underline">Learn more</a>
+          <a href="/privacy-policy/" class="text-[var(--color-accent)] hover:underline"
+            >Learn more</a
+          >
         </p>
       </div>
       <div class="flex gap-3 w-full md:w-auto">
diff --git a/src/pages/contact.astro b/src/pages/contact.astro
index 46ac0bb..c01a635 100644
--- a/src/pages/contact.astro
+++ b/src/pages/contact.astro
@@ -190,8 +190,9 @@ const description =
             <h3 class="text-[var(--color-cream)] font-medium mb-2">Is my data safe?</h3>
             <p class="text-sm text-[var(--color-subtle)]">
               Yes! All calculations happen in your browser. We never see, store, or transmit your
-              data. Read our <a href="/privacy" class="text-[var(--color-accent)] hover:underline"
-                >Privacy Policy</a
+              data. Read our <a
+                href="/privacy-policy/"
+                class="text-[var(--color-accent)] hover:underline">Privacy Policy</a
               > for more details.
             </p>
           </div>