Microsoft caught up in fresh privacy storm