1. In a combination including an identity manager and a user agent system executing on a host computer, the combination for use in at least one online transaction with a relying party that provides at least one security policy having requirements and at least one privacy policy, the user agent system comprising: the identity manager manage a plurality of user identities and to determine whether any user identity satisfies the security policy requirements; storage including at least one privacy preference relative to at least one user identity; an editor, responsive to user selections indicating at least one preference-related input relating to the at least one user identity, the editor: generate at least one privacy preference using the user selections wherein the at least one user identity is represented by at least one information card used in completing a first online transaction with the relying party; and determine a privacy preference for each category; and an engine, operatively connected to the storage, for the host computer evaluate the at least one privacy preference against a privacy policy associated with the first online transaction and obtained from the relying party, the engine perform the evaluation using the at least one privacy preference of any category referencing at least one required attribute; wherein when the identity manager determines a first user identity that satisfies the security policy and upon the user agent system determines that the privacy policy matches a ruleset associated with a first privacy preference relative to the first user identity, wherein the host computer provides the at least one information card representing the first user identity to the relying party.