Who gets to know what when: configuring privacy permissions in an awareness application