design ethics
Privacy zuckering
What is privacy zuckering?
Privacy zuckering tricks users into sharing more than they intend by defaulting settings to 'share', hiding privacy controls behind confusing language and extra clicks. Named after a certain founder, it presumes consent without ever asking for it.
Also known as: default-on sharing, privacy dark pattern
Prefer to watch?
Watch the recap 0:35
The demo
A privacy panel for a new account. Switch the defaults and look at the tally before you change a single switch - because almost nobody ever does.
Look at what's shared by default before you touch anything.
What this demo shows (text version)
A privacy settings panel with five share toggles: public profile, share location, personalised ads, share activity with partners, and searchable by email. In "privacy zuckering" mode all five start switched on, so a new user is sharing everything before changing anything - and most people never change defaults.
In "honest defaults" mode the same five toggles start switched off, so nothing is shared until the user actively opts in. A tally shows how many are on. The controls are identical; only the starting state differs, and that default is what most users will live with - which is why defaulting to maximum sharing is a dark pattern, not a neutral choice.
Defaulting to 'share' and hiding privacy controls behind vague wording presumes consent that was never given - most people don’t change defaults, so most share everything. Default to privacy and make sharing an active opt-in.
With the zuckered defaults you were sharing all five things before you'd touched a thing - because nobody changes defaults, and these were all set to "on". Flip to honest defaults and you share nothing until you choose to. Same controls, opposite starting point - and the starting point is the whole game.
The lever is defaults plus inertia. Most people never open settings, so whatever you pre-tick is what billions effectively "choose". Defaulting to maximum sharing and hiding the off switch isn't a neutral default - it's a decision made on the user's behalf, against their interest, and dressed up as their choice.
The honest version defaults to private, asks before it shares, and makes the controls plain and findable. Privacy-by-default is now law in places for exactly this reason. My test: if your growth depends on people not finding the off switch, you don't have consent - you have a [dark pattern](/entries/dark-patterns/).
Privacy zuckering manipulates users by defaulting to 'share' and hiding controls behind confusing language - you can test this effect firsthand in our demo. This technique assumes consent without asking, and most users don’t change defaults - so most share everything. Try the demo to see how it works in real time.
Privacy zuckering manipulates consent by defaulting to share and hiding controls - try the demo to see how it works. This page’s interactive demo lets you test privacy zuckering firsthand, revealing how default settings silently influence user behaviour.
Privacy zuckering works by defaulting to 'share' and hiding controls behind confusing language - you can see this in action in the demo on this page. It assumes consent without asking, and since most users don’t change defaults, they end up sharing everything - that’s why defaulting to privacy is the right choice.
Try the privacy zuckering demo to see how default settings trick users into sharing more than they intend. This page’s hands-on demo shows the real-world effect of privacy zuckering - no screenshots, no external tools, just your interaction.
Privacy zuckering exploits user inaction by defaulting to share and burying controls - try the demo to see how it silently erodes consent. It’s not just about defaults: privacy zuckering hides the real cost of sharing behind confusing language and extra clicks - you can test this effect live on this page.