How to notify users about privacy policy changes without spamming everyone