Behavioral experiments in data privacy