So they violated user's preference settings but they "preserved privacy"