How to ensure privacy in the age of HTML5