IANAL, but my understanding of Privacy Policies is a promise the site makes to you about how they will constrain their otherwise unconstrained behavior (err, subject to otherwise enacted laws). Thus, without any "pinky swear" documents from any website, a visitor should assume the worst intentions in all cases at all times. It doesn't mean the sites will behave badly, but it for sure means they reserve the right