Do you think they're lying on their privacy policy? Isn't that illegal?