The Wrong Answer Felt Like the Careful One

I’ve been building websites since 1999, which means I’ve earned the right to feel a little smug inside a setup wizard. I know what the checkboxes mean. I know which defaults to leave alone and which ones are quietly working against you. So when I sat down to set up privacy compliance on my own website, I expected a tidy afternoon and possibly a second coffee.

The setup wizard asks a lot of questions. Good ones, mostly. What do you collect, where do your visitors live, what’s running under the hood. I moved through them with the easy confidence of someone who has explained this stuff to clients for years.

Then it asked, in more words than this, whether my website shares data with anyone.

No. Obviously, no. I don’t sell my visitors to anybody. There’s no shadowy handshake happening behind my contact form. “No” felt like the honest answer, the protective answer, the answer a responsible business owner gives. I was reaching for it the way you reach for your own front door.

And it’s wrong.

Here’s what my instinct skipped right over: my site runs analytics. My newsletter runs through an email platform. Both of those are companies, and both of them process information about the people who visit my site and join my list. That counts as sharing data. Nobody’s being sold out and nothing shady is happening. It’s the completely ordinary plumbing of a modern website, and almost every site you’ve ever visited has the same pipes.

The wizard knew that. I, twenty-seven years into this work, momentarily did not.

I sat with that longer than I’d like to admit. Because if the wrong answer had felt careless, I never would have reached for it. It felt careful. It felt like the kind of answer you give because you take your visitors seriously. That’s exactly what makes it dangerous. The privacy mistakes that do real damage rarely look like recklessness. They show up dressed as responsibility, and they walk right past your judgment because your judgment is the thing vouching for them.

Now picture a careful business owner sitting alone with that same wizard on a Tuesday night. Someone who reads the questions properly, answers thoughtfully, and gives the same confident no I nearly gave. They’d click through the rest, generate their policy, and walk away feeling protected by a document that quietly says something untrue about their own website. There’s no error message for a wrong answer that feels right. It just gets filed away as done.

That’s the part that stayed with me. None of this happens because business owners got sloppy. The ground shifted while we were all busy running our businesses. The web filled up with helpful third-party tools, and every one of them is a small data relationship, whether it feels like one or not. Somewhere along the way, being careful and honest stopped being the same thing as being compliant. You can mean well, answer sincerely, and still end up with paperwork built on a wrong assumption.

The standard I keep coming back to is simple: your website should ask first. Ask before it drops a cookie. Ask before it hands a visit to an analytics tool. Ask the way you’d want to be asked. Getting there takes more than good intentions, as my own confident no kindly demonstrated.

I did finish the setup properly. Answer corrected, banner behaving, everything wired the way it should be. And here’s the thing about twenty-seven years of experience: it never made my instincts perfect, but it’s exactly what made me stop at that question, dig into why the tool disagreed with me, and know precisely what the right answer looked like once I saw it. The craft lives in the catch. I came away with new respect for the gap between meaning well and getting it right, and a lot more patience for every founder who has stared at one of those questions and guessed.

If you’re up for sitting down with the wizard yourself, honestly, go do it. You’ll learn things about your own website. Just clear an afternoon rather than a coffee break, because the questions run deep and they deserve real answers. And if you just felt your shoulders climb toward your ears at the thought, I built something for you. It’s called The Privacy Layer, and it exists so you never have to wonder whether your careful answer was the wrong one.