privacy metrics