Privacy Policy Everafter: The Pandora Protocol