[sunchild]

In the US, given that they're not in a regulated industry (except to the extent they qualify as a site aimed at children), they really only need to comply with their own stated privacy policies. The question is: will they?