What data privacy could look like in the metaverse