Explainer: sandboxes

One of the requirements of App Store apps is that they run in a sandbox. What does mean, and how does it affect the app? And why does privacy protection also use a sandbox?