Taggato: data protection by default