added privacy policy
fixed awkward wording of opt-out setting