Saved in:
Bibliographic Details
Main Authors: Graßl, Paul, Schraffenberger, Hanna, Borgesius, Frederik Zuiderveen, Buijzen, Moniek
Format: Preprint
Published: 2025
Subjects:
Online Access:https://arxiv.org/abs/2509.18210
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866909800099479552
author Graßl, Paul
Schraffenberger, Hanna
Borgesius, Frederik Zuiderveen
Buijzen, Moniek
author_facet Graßl, Paul
Schraffenberger, Hanna
Borgesius, Frederik Zuiderveen
Buijzen, Moniek
contents Dark patterns are (evil) design nudges that steer people's behaviour through persuasive interface design. Increasingly found in cookie consent requests, they possibly undermine principles of EU privacy law. In two preregistered online experiments we investigated the effects of three common design nudges (default, aesthetic manipulation, obstruction) on users' consent decisions and their perception of control over their personal data in these situations. In the first experiment (N = 228) we explored the effects of design nudges towards the privacy-unfriendly option (dark patterns). The experiment revealed that most participants agreed to all consent requests regardless of dark design nudges. Unexpectedly, despite generally low levels of perceived control, obstructing the privacy-friendly option led to more rather than less perceived control. In the second experiment (N = 255) we reversed the direction of the design nudges towards the privacy-friendly option, which we title "bright patterns". This time the obstruction and default nudges swayed people effectively towards the privacy-friendly option, while the result regarding perceived control stayed the same compared to Experiment 1. Overall, our findings suggest that many current implementations of cookie consent requests do not enable meaningful choices by internet users, and are thus not in line with the intention of the EU policymakers. We also explore how policymakers could address the problem.
format Preprint
id arxiv_https___arxiv_org_abs_2509_18210
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Dark and Bright Patterns in Cookie Consent Requests
Graßl, Paul
Schraffenberger, Hanna
Borgesius, Frederik Zuiderveen
Buijzen, Moniek
Computers and Society
Dark patterns are (evil) design nudges that steer people's behaviour through persuasive interface design. Increasingly found in cookie consent requests, they possibly undermine principles of EU privacy law. In two preregistered online experiments we investigated the effects of three common design nudges (default, aesthetic manipulation, obstruction) on users' consent decisions and their perception of control over their personal data in these situations. In the first experiment (N = 228) we explored the effects of design nudges towards the privacy-unfriendly option (dark patterns). The experiment revealed that most participants agreed to all consent requests regardless of dark design nudges. Unexpectedly, despite generally low levels of perceived control, obstructing the privacy-friendly option led to more rather than less perceived control. In the second experiment (N = 255) we reversed the direction of the design nudges towards the privacy-friendly option, which we title "bright patterns". This time the obstruction and default nudges swayed people effectively towards the privacy-friendly option, while the result regarding perceived control stayed the same compared to Experiment 1. Overall, our findings suggest that many current implementations of cookie consent requests do not enable meaningful choices by internet users, and are thus not in line with the intention of the EU policymakers. We also explore how policymakers could address the problem.
title Dark and Bright Patterns in Cookie Consent Requests
topic Computers and Society
url https://arxiv.org/abs/2509.18210