1. testing privacy policy