Privacy maze
Advertising opt-out split across unrelated menus
A fictional service places audience ads, partner sharing and measurement controls under three differently named menus with no summary of the final state.
Individual HTML example · Obstruction
A fictional account lets users disable activity sharing on the web, but opening the mobile app silently restores the setting under a different label.
This is an original fictional comparison. It depicts no real company and is not a legal finding or safe harbour.
A fictional account lets users disable activity sharing on the web, but opening the mobile app silently restores the setting under a different label.
Personalised activity · Off. The mobile app later restores the same sharing under “Smart recommendations”.. Setting may change. Unconfirmed state: Setting may change
Activity sharing · Off everywhere. Web and app show the same persisted state and audit date.. Keep off across devices. Saved state: Keep off across devices. Persisted account state, expanded: The saved state behind “Keep off across devices” remains consistent after refresh and across supported channels.
Why the first version can mislead: The route adds avoidable effort between the user’s stated intention and completion. In this connected-device account example, the obstacle is: “The mobile app later restores the same sharing under “Smart recommendations”.” Evidence should show whether the alternative remains usable and whether “Keep off across devices” reaches the represented state. The user cannot maintain a reliable privacy preference across interfaces.
What a fairer design does: Use one persistent state across channels, announce conflicts and require a deliberate choice before changing it.
Complete pattern context
Privacy controls are fragmented, inconsistently labelled or layered so that limiting collection or use is unnecessarily difficult. The label describes a recurring design mechanism; whether a particular implementation is harmful or unlawful depends on the complete journey, audience, evidence and rules within scope.
The full guide explains inclusion and exclusion criteria, harms, fair design principles, evidence questions and the relevant EU legal information layers. The example page isolates one scenario so it can be shared and discussed without reproducing the complete library on one page.
Continue comparing
Privacy maze
A fictional service places audience ads, partner sharing and measurement controls under three differently named menus with no summary of the final state.
Account deletion obstruction
A fictional platform labels a control “Delete account”, but the confirmation only hides the profile and leaves data and reactivation available indefinitely.
Account deletion obstruction
A fictional retailer places account deletion behind six help pages and requires a support ticket containing an order number even for users who never ordered.
Evidence base