The privacy policy was just a generic corporate "we may collect some information to improve a service" crap.

Technically, lawyers will argue that users had to opportunity to inform themselves.

Practically, nobody knew.