Using Salient Object Detection to Identify Manipulative Cookie Banners that Circumvent GDPR

• URL: http://arxiv.org/abs/2510.26967v1
• Date: Thu, 30 Oct 2025 19:50:13 GMT
• Title: Using Salient Object Detection to Identify Manipulative Cookie Banners that Circumvent GDPR
• Abstract summary: We study how often cookie banners comply with General Data Protection Regulation.<n>We also evaluate how frequently the banners comply with recommendations of national protection authorities.<n>Although 45% of relevant websites have fully compliant banners, we found aesthetic manipulation on 38% of compliant banners.<n>We find that 13.9% of EU websites change their banner design when the user is from the US, and EU websites are roughly 48.3% more likely to use aesthetic manipulation than non-EU websites.
• Score: 5.595574586977254
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: The main goal of this paper is to study how often cookie banners that comply with the General Data Protection Regulation (GDPR) contain aesthetic manipulation, a design tactic to draw users' attention to the button that permits personal data sharing. As a byproduct of this goal, we also evaluate how frequently the banners comply with GDPR and the recommendations of national data protection authorities regarding banner designs. We visited 2,579 websites and identified the type of cookie banner implemented. Although 45% of the relevant websites have fully compliant banners, we found aesthetic manipulation on 38% of the compliant banners. Unlike prior studies of aesthetic manipulation, we use a computer vision model for salient object detection to measure how salient (i.e., attention-drawing) each banner element is. This enables the discovery of new types of aesthetic manipulation (e.g., button placement), and leads us to conclude that aesthetic manipulation is more common than previously reported (38% vs 27% of banners). To study the effects of user and/or website location on cookie banner design, we include websites within the European Union (EU), where privacy regulation enforcement is more stringent, and websites outside the EU. We visited websites from IP addresses in the EU and from IP addresses in the United States (US). We find that 13.9% of EU websites change their banner design when the user is from the US, and EU websites are roughly 48.3% more likely to use aesthetic manipulation than non-EU websites, highlighting their innovative responses to privacy regulation.

Related papers

• Senseful Consense: Towards Simplified Cookie Banners using Plain Language [42.97962051360944]
  This study investigates the impact of applying plain language to cookie banners within the IAB Transparency & Consent Framework (TCF)<n>By substituting complex legal terms with simplified descriptions, we successfully demonstrated that the comprehension barrier can be lowered from a college-graduate level to a 7th-grade level.<n>We conclude that while plain language is a vital tool for digital accessibility, it must be paired with standardised implementation guidelines to ensure that cookie banners are both readable and informative.
  arXiv  Detail & Related papers  (2026-09-09T14:54:50Z)
• A history of GDPR cookie banner compliance: the roles of publishers, regulators and CMPs [10.073865488509703]
  The cookie banner landscape has evolved under the influence of key players, including publishers (website owners), regulators, and Consent Management Platforms (CMPs)<n>Our results indicate a positive evolution in the privacy landscape, with the compliance rate for websites featuring a "reject all" button increasing from 2.94% in 2018 to 30.66% in 2024.<n>Our findings highlight the importance of more uniform collaboration and guidance among EU-level regulators to reduce divergence and simplify cookie banner compliance.
  arXiv  Detail & Related papers  (2026-06-30T11:00:24Z)
• Global Web, Local Privacy? An International Review of Web Tracking [0.254890465057467]
  We evaluate websites' tracker connections for ten countries for two sets of sites.<n>Australia and the US (California) have the highest level of web tracking.<n>We find that the Common Top 525 sites have 50.5% fewer average tracker connections when accessed from EU countries.
  arXiv  Detail & Related papers  (2026-04-18T19:12:47Z)
• RegTrack: Uncovering Global Disparities in Third-party Advertising and Tracking [2.625007842420751]
  Third party advertising and tracking (A&T) are pervasive across the web, yet user exposure varies significantly with browser choice, browsing location, and hosting jurisdiction.<n>Our analysis reveals that browser choice, user location, and hosting jurisdiction each shape tracking exposure in distinct ways.
  arXiv  Detail & Related papers  (2026-03-03T07:21:15Z)
• Machine-Readable Ads: Accessibility and Trust Patterns for AI Web Agents interacting with Online Advertisements [0.0]
  multimodal language models are rapidly evolving into web agents that can browse, click, and purchase items on behalf of users.<n>Yet little is known about how these agents interact with ads or which design principles ensure reliable engagement.<n>We ran a controlled experiment using a faithful clone of the news site TT.com, seeded with diverse ads.
  arXiv  Detail & Related papers  (2025-07-17T07:10:27Z)
• Fingerprinting and Tracing Shadows: The Development and Impact of Browser Fingerprinting on Digital Privacy [55.2480439325792]
  Browser fingerprinting is a growing technique for identifying and tracking users online without traditional methods like cookies. This paper gives an overview by examining the various fingerprinting techniques and analyzes the entropy and uniqueness of the collected data.
  arXiv  Detail & Related papers  (2024-11-18T20:32:31Z)
• How Unique is Whose Web Browser? The role of demographics in browser fingerprinting among US users [50.699390248359265]
  Browser fingerprinting can be used to identify and track users across the Web, even without cookies. This technique and resulting privacy risks have been studied for over a decade. We provide a first-of-its-kind dataset to enable further research.
  arXiv  Detail & Related papers  (2024-10-09T14:51:58Z)
• Privacy Policies and Consent Management Platforms: Growth and Users' Interactions over Time [4.356242302111725]
  Consent platforms (CMPs) have emerged as practical solutions to make it easier for website administrators to manage user consent. This paper presents a detailed analysis of the evolution of CMPs spanning nine years. We observe how even small changes in the design of Privacy Banners have a critical impact on the user's giving or denying their consent to data collection.
  arXiv  Detail & Related papers  (2024-02-28T13:36:27Z)
• User Attitudes to Content Moderation in Web Search [49.1574468325115]
  We examine the levels of support for different moderation practices applied to potentially misleading and/or potentially offensive content in web search. We find that the most supported practice is informing users about potentially misleading or offensive content, and the least supported one is the complete removal of search results. More conservative users and users with lower levels of trust in web search results are more likely to be against content moderation in web search.
  arXiv  Detail & Related papers  (2023-10-05T10:57:15Z)
• The Impact of User Location on Cookie Notices (Inside and Outside of the European Union) [3.719580143660037]
  We crawl 1,500 European, American, and Canadian websites from each of 18 countries. Using a series of regression models, we find that the website's Top Level Domain explains a substantial portion of the variance in cookie notice metrics. There is one exception to this finding: cookie notices differ when accessing.com domains from inside versus outside of the EU.
  arXiv  Detail & Related papers  (2021-10-19T10:42:39Z)
• \ extit{StateCensusLaws.org}: A Web Application for Consuming and Annotating Legal Discourse Learning [89.77347919191774]
  We create a web application to highlight the output of NLP models trained to parse and label discourse segments in law text. We focus on state-level law that uses U.S. Census population numbers to allocate resources and organize government.
  arXiv  Detail & Related papers  (2021-04-20T22:00:54Z)
• Trustworthy Transparency by Design [57.67333075002697]
  We propose a transparency framework for software design, incorporating research on user trust and experience. Our framework enables developing software that incorporates transparency in its design.
  arXiv  Detail & Related papers  (2021-03-19T12:34:01Z)
• Differential Tracking Across Topical Webpages of Indian News Media [3.721918008485747]
  We propose a novel method for automatic extraction and categorization of Indian news topical subpages based on the details in their URLs. We find differential user tracking among subpages, and between subpages and homepages. embedded third-parties tend to track specific subpages simultaneously, revealing possible user profiling in action.
  arXiv  Detail & Related papers  (2021-03-07T20:20:47Z)
• Cross-Domain Learning for Classifying Propaganda in Online Contents [67.10699378370752]
  We present an approach to leverage cross-domain learning, based on labeled documents and sentences from news and tweets, as well as political speeches with a clear difference in their degrees of being propagandistic. Our experiments demonstrate the usefulness of this approach, and identify difficulties and limitations in various configurations of sources and targets for the transfer step.
  arXiv  Detail & Related papers  (2020-11-13T10:19:13Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.