`policy_url` should be `policyUrl` (for consistency)