add privacy policy and protocol specification