Disclaimer: also Hobby person but did some more reading on that topic in the past. . Think about what those things are then decide:

The tos are your conditions: I as provider of this service will reserve the right to x. When a user does y I will do z. It’s cover your ass for businesses.

A privacy policy on the other hand might be required by law as soon as you process user data in any way. This is something that I would look into your jurisdiction and their requirements. I’d guess Germany is more on the formal side on things (clichés and everything)

In short: you don’t need a tos but most likely want one. You don’t want a privacy policy but most likely need one. :)