Web snooping policy shrouded in secrecy