Immersive Invaders: Privacy Threats from Deceptive Design in Virtual Reality Games and Applications

Abstract

Virtual Reality (VR) technologies offer immersive experiences but collect substantial user data. While deceptive design is well-studied in 2D platforms, little is known about its manifestation in VR environments and its impact on user privacy. This research investigates deceptive designs in privacy communication and interaction mechanisms of 12 top-rated VR games and applications through autoethnographic evaluation of the applications and thematic analysis of privacy policies. We found that while many deceptive designs rely on 2D interfaces, some VR-unique features, while not directly enabling deception, amplified data disclosure behaviors, and obscured actual data practices. Convoluted privacy policies and manipulative consent practices further hinder comprehension and increase privacy risks. We also observed privacy-preserving design strategies and protective considerations in VR privacy policies. We offer recommendations for ethical VR design that balance immersive experiences with strong privacy protections, guiding researchers, designers, and policymakers to improve privacy in VR environments.

arXiv comment28 pages, 4 tables, 3 figures. For related materials, see: https://osf.io/axzve/

References in corpus (16)

• Dark Patterns at Scale: Findings from a Crawl of 11K Shopping Websites
• Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influence
• I am Definitely Manipulated, Even When I am Aware of it. It s Ridiculous! -- Dark Patterns from the End-User Perspective
• An Ontology of Dark Patterns Knowledge: Foundations, Definitions, and a Pathway for Shared Knowledge-Building
• Dark and Bright Patterns in Cookie Consent Requests
• About Engaging and Governing Strategies: A Thematic Analysis of Dark Patterns in Social Networking Services
• The Great AI Witch Hunt: Reviewers Perception and (Mis)Conception of Generative AI in Research Writing
• Defending Against the Dark Arts: Recognising Dark Patterns in Social Media
• Memory Manipulations in Extended Reality
• Exploring the Privacy Risks of Adversarial VR Game Design
• Privacy in Immersive Extended Reality: Exploring User Perceptions, Concerns, and Coping Strategies
• Skip, Skip, Skip, Accept!!!: A Study on the Usability of Smartphone Manufacturer Provided Default Features and User Privacy
• Deceived by Immersion: A Systematic Analysis of Deceptive Design in Extended Reality
• From Motivating to Manipulative: The Use of Deceptive Design in a Game's Free-to-Play Transition
• It was hard to find the words: Using an Autoethnographic Diary Study to Understand the Difficulties of Smart Home Cyber Security Practices
• Computer-based Deceptive Game Design in Commercial Virtual Reality Games: A Preliminary Investigation