A survey of query log privacy-enhancing techniques from a policy perspective