framework: Privacy Guard