Oculus Rift's privacy policy says it's not liable if it's hacked