privacy-policy testing