Commercial Virtual Reality (VR) transforms people’s virtual experiences but introduces deceptive design opportunities that threaten user privacy. Although privacy deceptive patterns on 2D platforms are well-documented, their impacts in VR remain understudied. We surveyed 481 users’ experiences and responses to privacy deceptive patterns across eight commercial VR scenarios. We found that VR deceptive design can exploit both cognitive vulnerabilities and bodily strain, a phenomenon we define as Ergonomic Susceptibility, and that VR’s sensory-rich experiences can make users more likely to accept invasive data disclosure framed as immersion-preserving. Users recognized manipulation but their prior non-VR exposure can foster privacy resignation. Our study shows ergonomics is a critical factor in future privacy-preserving VR design, and urges VR researchers, designers, and policymakers to develop ethical design and privacy management solutions that account for VR’s unique multimodal, immersive, and ergonomic properties, building immersive experiences that respect user privacy and mitigate manipulative data practices.

This study examines how anecdotal stories from friends, peers, and online sources influence non-experts' perceptions and behaviors toward smart home IoT devices.We surveyed 263 participants, collecting narratives that either positively or negatively influenced their perception of IoT devices, which they retold in text and comic formats to encourage deeper reflection.Thematic analysis of the narratives, combined with quantitative survey data, reveals that stories significantly impact trust and willingness to use and adopt IoT devices.Negative stories, particularly those concerning security, privacy, and device unreliability, reduced trust and usage, while positive stories about home safety through monitoring and improved quality of life increased interest in IoT devices.Perceptions of different IoT devices varied based on the themes associated with the stories.The findings highlight the powerful role of storytelling in driving consumer acceptance of technology. CCS Concepts• Human-centered computing → Empirical studies in HCI; • Security and privacy → Social aspects of security and privacy.

Virtual Reality (VR) technologies offer immersive experiences but collect substantial user data. While deceptive design is well-studied in 2D platforms, little is known about its manifestation in VR environments and its impact on user privacy. This research investigates deceptive designs in privacy communication and interaction mechanisms of 12 top-rated VR games and applications through autoethnographic evaluation of the applications and thematic analysis of privacy policies. We found that while many deceptive designs rely on 2D interfaces, some VR-unique features, while not directly enabling deception, amplified data disclosure behaviors, and obscured actual data practices. Convoluted privacy policies and manipulative consent practices further hinder comprehension and increase privacy risks. We also observed privacy-preserving design strategies and protective considerations in VR privacy policies. We offer recommendations for ethical VR design that balance immersive experiences with strong privacy protections, guiding researchers, designers, and policymakers to improve privacy in VR environments.

Designers are sometimes accused of using deceptive methods to manipulate users' information privacy decisions through "privacy dark patterns." Through semi-structured interviews, we explore the perceptions of 23 design practitioners towards the implementation of "privacy dark patterns" created by other designers. This paper explores designers' perceived responsibilities toward users' privacy and their interpretations of the reasons behind the design implementation. We found a range of empathetic rationales among our participants toward other designers' intentions. An example theme is Designer Followed the Status Quo, where common and widely used privacy interfaces are normalized a practice that is typically viewed as reasonable. Our participants' interpretations of the design intent influenced their self-reported practices for navigating similar design requests. We propose a set of factors that influence privacy design practices, including following conventions and norms, ensuring legal compliance, reliance on established usability standards, perceived benefits to businesses and consumers, and degrees of privacy harm.