privacy and policy (shad)