privacy policy, first draft