They have a privacy policy, and if they don't follow it then they could be liable for it.

Their use of cookies is fairly easy to inspect, although that doesn't prove they aren't doing fingerprinting or ip tracking.