How to skim a privacy policy to spot red flags (Washington Post)