breaking: "we take your privacy seriously" is still not a privacy policy