Basically, you have to tell users what you do with their data. That includes all the data that they share in your website and any data concerning cookies (doesn't include website functionality cookies).
Everything else (delete, export and consent stuff) is already included in Chevereto or it will be included in v3.10.14