What Facebook's Privacy Policy Allows May Surprise You