this suggests the privacy policy was the thing collecting info