This article examines user control of privacy online as indicated by functional features of commercial websites. While prior studies have focused on what's written in privacy policy statements, systematic attention on the interactive aspects of the Web have been scant. This analysis, based on a sample of 398 commercial sites in the United States, shows that the more popular sites did not necessarily provide better privacy control features for users than sites that were randomly selected. In addition, there was no clear relationship between website characteristics and the functional features of privacy control. Implications are discussed for the current status of online privacy policy in the United States and the European Union.