Sites make assertions about their privacy practices.
Users express their privacy preferences over those practices.
Negotiation between the site's supported and user's desired practices results in an
agreement.
The interaction between the site and user is flexible. Users can find the level of
privacy most appropriate for their sense of privacy and the type of interaction they wish
to have with that site.