Why does a side project need a bunch of legal documentation? Actual harm must be shown before you'll find yourself in any trouble. Having a shiny cookie policy isn't really going to help you.

Focus on your project first.