move privacy policy to separate resource (bug 870557)