Micropayments company Coil distributes new privacy policy with email that puts users' addresses in the To: field