privacy policy (with CCID)