By the Stats: Best Practices in Online Privacy