"Okay, whatever": An Evaluation of Cookie Consent Interfaces
Hana Habib, Megan Li, Ellie Young, Lorrie Faith Cranor
Abstract
Many websites have added cookie consent interfaces to meet regulatory consent requirements. While prior work has demonstrated that they often use dark patterns — design techniques that lead users to less privacy-protective options — other usability aspects of these interfaces have been less explored. This study contributes a comprehensive, two-stage usability assessment of cookie consent interfaces. We first inspected 191 consent interfaces against five dark pattern heuristics and identified design choices that may impact usability. We then conducted a 1,109-participant online between-subjects experiment exploring the usability impact of seven design parameters. Participants were exposed to one of 12 consent interface variants during a shopping task on a prototype e-commerce website and answered a survey about their experience. Our findings suggest that a fully-blocking consent interface with in-line cookie options accompanied by a persistent button enabling users to later change their consent decision best meets several design objectives.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers23
- The Effect of Design Patterns on (Present and Future) Cookie Consent DecisionsNataliia Bielova, Laura Litvine, Anysia Nguyen, Mariam Chammat et al.USENIX Security 2024 · 34 citations
- "I know even if you don't tell me": Understanding Users' Privacy Preferences Regarding AI-based Inferences of Sensitive Information for PersonalizationSumit Asthana, Jane Im, Zhe Chen, Nikola BanovicCHI 2024 · 33 citations
- Investigating Deceptive Design in GDPR's Legitimate InterestLin Kyi, Sushil Ammanaghatta Shivakumar, Cristiana Teixeira Santos, Franziska Roesner et al.CHI 2023 · 32 citations
- "It doesn't tell me anything about how my data is used": User Perceptions of Data Collection PurposesLin Kyi, Abraham Mhaidli, Cristiana Teixeira Santos, Franziska Roesner et al.CHI 2024 · 22 citations
- How Do HCI Researchers Study Cognitive Biases? A Scoping ReviewNattapat Boonprakong, Benjamin Tag, Jorge Gonçalves, Tilman DinglerCHI 2025 · 19 citations
Builds on7
- Tranco: A Research-Oriented Top Sites Ranking Hardened Against ManipulationVictor Le Pochat, Tom van Goethem, Samaneh Tajalizadehkhoob, Maciej Korczynski et al.NDSS 2019 · 826 citations
- What Makes a Dark Pattern... Dark?: Design Attributes, Normative Considerations, and Measurement MethodsArunesh Mathur, Mihir Kshirsagar, Jonathan R. MayerCHI 2021 · 327 citations
- Do Cookie Banners Respect my Choice? : Measuring Legal Compliance of Banners from IAB Europe's Transparency and Consent FrameworkCélestin Matte, Nataliia Bielova, Cristiana Teixeira SantosS&P 2020 · 212 citations
- Dark Patterns and the Legal Requirements of Consent Banners: An Interaction Criticism PerspectiveColin M. Gray, Cristiana Teixeira Santos, Nataliia Bielova, Michael Toth et al.CHI 2021 · 175 citations
- A Design Space for Privacy Choices: Towards Meaningful Privacy Control in the Internet of ThingsYuanyuan Feng, Yaxing Yao, Norman M. SadehCHI 2021 · 114 citations
Related papers
- This Website Uses Nudging: MTurk Workers' Behaviour on Cookie Consent NoticesCarlos Bermejo Fernandez, Dimitris Chatzopoulos, Dimitrios Papadopoulos, Pan HuiCSCW 2021 · 47 citations
- A US-UK Usability Evaluation of Consent Management Platform Cookie Consent Interface Design on Desktop and MobileElijah Robert Bouma-Sims, Megan Li, Yanzi Lin, Adia Sakura-Lemessy et al.CHI 2023 · 23 citations
- Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their InfluenceMidas Nouwens, Ilaria Liccardi, Michael Veale, David R. Karger et al.CHI 2020 · 491 citations
- A Comparative Study of Dark Patterns Across Web and Mobile ModalitiesJohanna Gunawan, Amogh Pradeep, David R. Choffnes, Woodrow Hartzog et al.CSCW 2021 · 128 citations
- (Un)informed Consent: Studying GDPR Consent Notices in the FieldChristine Utz, Martin Degeling, Sascha Fahl, Florian Schaub et al.CCS 2019 · 429 citations
