We can't allow privacy to be an afterthought with eye tracking