[Paper Review] Friend Inspector: A Serious Game to Enhance Privacy Awareness in Social Networks

Alexandra Cetto, Michael Netter+5 more|arXiv (Cornell University)|Feb 20, 2014

Privacy, Security, and Data ProtectionSocial Sciences26 references20 citations

TL;DR

Friend Inspector is a client-side, browser-based serious game that enhances privacy awareness on Facebook by enabling users to test and improve their understanding of who can see their shared personal items using their actual Facebook data. The game uses interactive, personalized feedback to promote inductive learning, and since its launch, it has attracted over 100,000 visitors, demonstrating strong demand for privacy awareness tools in social networks.

ABSTRACT

Currently, many users of Social Network Sites are insufficiently aware of who can see their shared personal items. Nonetheless, most approaches focus on enhancing privacy in Social Networks through improved privacy settings, neglecting the fact that privacy awareness is a prerequisite for privacy control. Social Network users first need to know about privacy issues before being able to make adjustments. In this paper, we introduce Friend Inspector, a serious game that allows its users to playfully increase their privacy awareness on Facebook. Since its launch, Friend Inspector has attracted a significant number of visitors, emphasising the need for better tools to understand privacy settings on Social Networks.

Motivation & Objective

• To address the growing gap in privacy awareness among social network users, especially youth, who often misjudge who can view their shared content.
• To overcome the limitations of static privacy checkers that only analyze public data and do not engage users in active learning.
• To develop a playful, interactive tool that helps users understand the actual visibility of their personal items on Facebook by leveraging their real profiles.
• To promote responsible social media behavior by enabling users to experiment with privacy settings in a risk-free, educational environment.
• To provide a secure, privacy-preserving implementation that does not store or transmit user data, ensuring trust and ethical data use.

Proposed method

• The game is implemented as a client-side web application using JavaScript, Backbone.js, and Handlebars to ensure all data processing occurs locally in the user’s browser.
• It integrates with Facebook via OAuth 2.0, requesting only a limited, user-approved access token to read profile data without storing it on servers.
• The application uses a model-view-controller (MVC) architecture to separate logic, data, and presentation, enabling a responsive and modular interface.
• Users are presented with personalized challenges based on their actual Facebook content, such as tagging and photo visibility, to test their knowledge of privacy settings.
• The game provides immediate, tailored feedback and recommendations to help users adjust privacy settings to match their intended audience.
• Multilingual support via i18next enables accessibility in English and German, with plans for future language expansion.

Experimental results

Research questions

• RQ1 How can a serious game effectively increase users’ awareness of the actual visibility of their personal items on Facebook?
• RQ2 To what extent can a game-based approach that uses real user data improve privacy awareness compared to static privacy checkers?
• RQ3 What design principles enable a secure, privacy-preserving implementation of a social network privacy game without storing user data?
• RQ4 How does active, experiential learning through personalized feedback impact users’ understanding of privacy settings?
• RQ5 What level of user engagement and adoption can be achieved by a tool that combines education with real Facebook data interaction?

Key findings

• Since its launch on June 26, 2013, Friend Inspector has attracted over 100,000 unique visits within five months, indicating strong user interest in privacy awareness tools.
• The game successfully enables users to test and improve their understanding of privacy settings using their own Facebook data, promoting inductive learning through personalized challenges.
• The application maintains user privacy by processing all data client-side with no server-side storage or transmission of personal information.
• The use of OAuth 2.0 and a transparent, open-source implementation under the Apache License 2.0 enhances user trust and allows for external verification of security.
• The game’s design, which uses real profile data and provides immediate feedback, leads to higher engagement and more relevant learning outcomes than static privacy checkers.
• The tool’s success in media coverage and user adoption underscores the unmet need for interactive, privacy-preserving educational tools in social media.