Timing is everything?: the effects of timing and placement of online privacy indicators