Privacy surprises … that somehow aren’t