[=] WIP: privacy middleware