testing privacy