My overall personal policy is that I never do anything with any user data (including email), other than to respond directly to the user.
Out of curiosity, what is the "default" policy under controlling law if no policy is displayed? Is it maximal respect for user privacy (what I do) or is it maximal use of user data?
Hmmm... what if the user types in their own copyright notice in their comment text? And then what if Google ignores it -- who is violating what then??
As far as email, if a user sends an unsolicited email to me, what privacy obligations do I have to obey or even disclose? My personal email policy is that any email is a private communication and requires explicit permission to be forwarded or published elsewhere.
I do have to admit that on occasion I will excerpt from an email message or comment anonymously, but I do so in a way that does not violate privacy.
Please comment on the privacy policies that you use or would prefer. And... be sure to explicitly state whether I have permission to "steal" your policy!