So if I were to build a service that used IP, along with other signals from the browser, to prevent more sophisticated kinds of attacks before showing the user a privacy agreement, would that be ok, assuming that the privacy agreement would be available after they pass those checks?