Designing a Social Protocol: Lessons Learned from the Platform for Privacy Preferences