privacy api blog