privacy analysis