Is Online Privacy Worth Paying For?