Redbox’s privacy nightmare revealed