Online games use dark designs to collect player data

The privacy policies and practices of online games contain dark design patterns which could be deceptive, misleading, or coercive to users, according to a new study from Aalto University
Illustration of a gamer dressed in yellow, playing a video game on the right side of the picture. Big green hands controlling a massive controller on the left side, with green lines connecting to the player from behind.
Dark designs are interface decisions that manipulate users into doing something they otherwise wouldn’t. Image: Matti Ahlgren/Aalto University

Gaming is a $193 billion industry – nearly double the size of the film and music industries combined – and there are around three billion gamers worldwide. While online gaming can improve wellbeing and foster social relations, privacy and awareness issues could potentially offset these benefits and cause real harm to gamers.

The new study, by scientists at Aalto University’s Department of Computer Science, reveals potentially questionable data collection practices in online games, along with misconceptions and concerns about privacy among players. The study also offers risk mitigation strategies for players and design recommendations for game developers to improve privacy in online games.

‘We had two supporting lines of inquiry in this study: what players think about games, and what games are really up to with respect to privacy,’ says Janne Lindqvist, associate professor of computer science at Aalto. ‘It was really surprising to us how nuanced the considerations of gamers were. For example, participants said that, to protect their privacy, they would avoid using voice chat in games unless it was absolutely necessary. Our game analysis revealed that some games try to nudge people to reveal their online identities by offering things like virtual rewards.’

The authors identified instances of games using dark design – interface decisions that manipulate users into doing something they otherwise wouldn’t. These could facilitate the collection of player data and encourage players to integrate their social media accounts or allow data sharing with third parties. 

‘When social media accounts are linked to games, players generally can’t know what access the games have to these accounts or what information they receive,’ says Amel Bourdoucen, doctoral researcher in usable security at Aalto. ‘For example, in some popular games, users can log in with (or link to) their social media accounts, but these games may not specify what data is collected through such integration.’

Data handling practices of games are often hidden behind legal jargon in privacy policies

Amel Bourdoucen, doctoral researcher, Aalto University

The global gaming community has been subject to increased scrutiny over the past decade because of online harassment and the industry’s burnout culture. While these issues still linger, the push for more tech regulation in the EU and US has also brought privacy issues to the forefront.

‘Data handling practices of games are often hidden behind legal jargon in privacy policies,’ says Bourdoucen. ‘When users' data are collected, games should make sure the players understand and consent to what is being collected. This can increase the player’s awareness and sense of control in games. Gaming companies should also protect players’ privacy and keep them safe while playing online.’

According to the study, participants were often unaware that their chat-based conversations might be disclosed to third parties. Games also didn’t notify players of data sharing during the game. 

The study showed that players are aware of the risks, and it highlights several mitigation tactics used by players. ‘We found that players try to maintain their privacy when playing online games by choosing text chats for discussion instead of voice chats, since they believe they may be more closely watched,’ says Bourdoucen. ‘According to our findings, female players are the most impacted and feel the need to conceal their gender when playing by creating various avatars or refraining from having voice conversations with other players.’ 

Finally, the study proposes solutions to counter these problems, such as more transparent approaches to data collection. Overall, the authors recommend that games and gaming platforms strive to protect all their players.

‘Games really should be fun and safe for everybody, and they should support the player’s autonomy. One way of supporting autonomy would be to let players opt out from invasive data collection,’ says Lindqvist.

Reference: Amel Bourdoucen, Leysan Nurgalieva, and Janne Lindqvist. 2023. Privacy Is the Price: Player Views and Technical Evaluation of Data Practices in Online Games. Proc. ACM Hum.-Comput. Interact. 7, CHI PLAY, Article 418 (November 2023), 43 pages.

Briwsing clutter

One in four internet users are overwhelmed by the clutter in their browser

Study reveals that some coping strategies only make the problem worse

Mahine Learning researchers working at Department of Computer Science in Aalto University

Department of Computer Science

To foster future science and society.

Christian Guckelsberger in front of graffiti

Ask a scientist: How will AI affect creativity?

The impact of creative AI is unfolding before our eyes, yet we struggle to understand it. It’s the perfect time to ask researchers what they see and think.

  • Published:
  • Updated:

Read more news

Aalto University School of Business, a student ascending, public art of Risto Suomi on the wall, photo Mikko Raskinen
Research & Art Published:

Time off work - the biggest reason why fewer women are CEOs

Women are underrepresented in CEO positions partly because they spend more time outside of the labour market during the years when their careers are most likely to take off. Women also less often work in sales or production, which are common pathways for CEO recruitment.
Photo of a smiling young woman with scientific graphic showing pink balls representing quantum mechanic effects
Research & Art Published:

A summer internship with a twist: the story of prize-winning student Netta Karjalainen

Read the story of prize-winning Bachelor student’s summer internship at Aalto
Nokia Säätiön tunnustuspalkinto emeritusprofessori Antti Räisäselle radiotekniikan tutkimuksen ja opetuksen kehittämisestä
Awards and Recognition Published:

Nokia Foundation grants Professor Emeritus Antti Räisänen a recognition award for achievements in radio engineering research and education

Professor Emeritus Antti Räisänen, is a pioneer in the scientific research of higher radio frequencies and is known for his relentless passion for developing radio engineering education.
A 6-point, star-like structure represents the unconventional superconductivity of a van der Waals monolayer.
Research & Art Published:

Researchers discover unconventional superconductivity in a monolayer van der Waals material

The group discovered nodal superconductivity with hidden order fluctuations