A user study of the expandable grid applied to P3P privacy policy visualization