A role-playing VR tutorial in which users hand-carry a privacy policy's data items, and a preliminary study pitting it against the policy text.
Why
VR headsets collect biometric data like gaze and body movement, unchangeable once leaked, yet the policy meant to disclose this is a long, jargon-heavy document nobody reads.
How
Each Oculus Privacy Policy data item becomes a ball the user grabs, reads and throws to VR content, the content provider or a third party. Fourteen people either read the policy or played the tutorial.
New
Privacy awareness was on par with reading the text and satisfaction significantly higher (p=0.007): an unread policy becomes an experience people rate higher, without losing what it conveys.
