. . . "Publishers must have and abide by an appropriate privacy policy that clearly discloses that third parties may collect certain types of information about a user's visit to their websites, including whether the user interacted with content on the sites." .