Who is responsible for your privacy when you use online services?