V2.05.5Cursor privacydesignresearch

Cursor sharing exposes reading position and needs an independent off switch

Aliases: reading-position privacy · attention trace · selective presence

What it is

Cursor privacy concerns continuous disclosure of reading behavior through telepointers, selections, and scrolling. Even without editing or speech, a cursor can reveal which passage is inspected, for how long, and whether sensitive material is visited. Disabling broadcast should be independent of leaving the document or collaborative editing, allowing work without transmitting a fine-grained attention trace.

Why it happens

Cursor events support pointing and collision avoidance, but their time series can be repurposed to infer interest, hesitation, pace, or performance. Risk rises with precision, retention, and viewer power. If stopping disclosure requires leaving collaboration, the choice is coercive. Independent controls, scope limits, and momentary sharing separate immediate coordination value from persistent observation.

Studying it

Contextual interviews and scenario experiments can compare continuous, on-demand, obfuscated, and off states on sharing choices, performance, perceived observation, and comprehension of data use. Audit server retention, replay access, analytics, and evaluation reuse. Low opt-out under a hidden control or social pressure is not evidence of consent.

Where it stops holding

Live pointers may be essential during explicit co-manipulation or instruction; when hidden, partners should see that the cue is unavailable rather than a false frozen position. A privacy toggle is deceptive if telemetry continues. Anonymous traces may still be re-identified through task and identity data.

Applying it

  • Provide a separate, reversible “broadcast my cursor” control with visible state and audience.
  • Offer press-to-share, point-only sharing, and reduced precision between always on and off.
  • Avoid retaining trails by default; when retention is necessary, disclose purpose, duration, access, and deletion.
  • Test opt-out without penalty and verify that work continues and background collection stops.

Related

  • Same group: V2.05.1 Cursors need identity labels · V2.05.2 Color alone fails at scale · V2.05.3 Cursor lag breaks spoken reference · V2.05.4 Many cursors obscure content
  • Adjacent: V2.07 Attention cues and gaze sharing · V2.09 Boundary between awareness and surveillance
  • Search terms: cursor privacy · attention trace · selective presence

Cards in the same group

Quick Actions

Share

Share this page

ios_share

https://hci.top/en/handbook/V2.05.5