Privacy theory