privacy api conditions