Yes, good point - let me put the privacy policy in the System message as well + explain the session invalidation point in the privacy FAQ. Thanks!