CORSify the ToS/Privacy 'APIs'