There's an easier solution. Just don't have private data. Then you don't need SSL either.

Unless you also want to deal with security, backups, GDPR compliance, etc.