Gravar e-mail: Characterizing privacy in quantum machine learning