default privacy policy changes do "private" instead of "public"