{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,13]],"date-time":"2026-04-13T15:11:26Z","timestamp":1776093086503,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":36,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,10,14]],"date-time":"2023-10-14T00:00:00Z","timestamp":1697241600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,10,14]]},"DOI":"10.1145\/3584931.3606962","type":"proceedings-article","created":{"date-parts":[[2023,10,13]],"date-time":"2023-10-13T22:23:10Z","timestamp":1697235790000},"page":"298-306","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":13,"title":["\"\\\"It doesn't just feel like something a lawyer slapped together.\\\"- Mental-Model-Based Privacy Policy for Third-Party Applications on Facebook\""],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3840-9015","authenticated-orcid":false,"given":"Rizu","family":"Paudel","sequence":"first","affiliation":[{"name":"Department of Computer Science, Utah State University, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9012-6146","authenticated-orcid":false,"given":"Ankit","family":"Shrestha","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Utah State University, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6326-5810","authenticated-orcid":false,"given":"Prakriti","family":"Dumaru","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Utah State University, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5764-2253","authenticated-orcid":false,"given":"Mahdi Nasrullah","family":"Al-Ameen","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Utah State University, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,10,14]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Online Account. In Symposium on Usable Privacy and Security (Poster Session).","author":"Al-Ameen Mahdi\u00a0Nasrullah","year":"2020","unstructured":"Mahdi\u00a0Nasrullah Al-Ameen and Huzeyfe Kocabas . 2020 . \u201c I cannot do anything\u201d: User\u2019s Behavior and Protection Strategy upon Losing, or Identifying Unauthorized Access to Online Account. In Symposium on Usable Privacy and Security (Poster Session). Mahdi\u00a0Nasrullah Al-Ameen and Huzeyfe Kocabas. 2020. \u201cI cannot do anything\u201d: User\u2019s Behavior and Protection Strategy upon Losing, or Identifying Unauthorized Access to Online Account. In Symposium on Usable Privacy and Security (Poster Session)."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2021-0067"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3378393.3402244"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-05563-8_1"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2014.23039"},{"key":"e_1_3_2_1_6_1","unstructured":"Kathy Baxter Catherine Courage and Kelly Caine. 2015. Understanding your users: a practical guide to user research methods. Morgan Kaufmann.  Kathy Baxter Catherine Courage and Kelly Caine. 2015. Understanding your users: a practical guide to user research methods. Morgan Kaufmann."},{"key":"e_1_3_2_1_7_1","unstructured":"Richard\u00a0E Boyatzis. 1998. Transforming qualitative information: Thematic analysis and code development. sage.  Richard\u00a0E Boyatzis. 1998. Transforming qualitative information: Thematic analysis and code development. sage."},{"key":"e_1_3_2_1_8_1","volume-title":"Using thematic analysis in psychology. Qualitative research in psychology 3, 2","author":"Braun Virginia","year":"2006","unstructured":"Virginia Braun and Victoria Clarke . 2006. Using thematic analysis in psychology. Qualitative research in psychology 3, 2 ( 2006 ), 77\u2013101. Virginia Braun and Victoria Clarke. 2006. Using thematic analysis in psychology. Qualitative research in psychology 3, 2 (2006), 77\u2013101."},{"key":"e_1_3_2_1_9_1","volume-title":"Statistical power analysis for the behavioral sciences","author":"Cohen Jacob","unstructured":"Jacob Cohen . 2013. Statistical power analysis for the behavioral sciences . Academic press . Jacob Cohen. 2013. Statistical power analysis for the behavioral sciences. Academic press."},{"key":"e_1_3_2_1_10_1","volume-title":"Inside Facebook","author":"Darwell Brittany","year":"2012","unstructured":"Brittany Darwell . 2012 . Facebook platform supports more than 42 million pages and 9 million apps . Inside Facebook , April (2012). Brittany Darwell. 2012. Facebook platform supports more than 42 million pages and 9 million apps. Inside Facebook, April (2012)."},{"key":"e_1_3_2_1_11_1","volume-title":"Verbal reports as data.Psychological review 87, 3","author":"Ericsson K\u00a0Anders","year":"1980","unstructured":"K\u00a0Anders Ericsson and Herbert\u00a0 A Simon . 1980. Verbal reports as data.Psychological review 87, 3 ( 1980 ), 215. K\u00a0Anders Ericsson and Herbert\u00a0A Simon. 1980. Verbal reports as data.Psychological review 87, 3 (1980), 215."},{"key":"e_1_3_2_1_12_1","unstructured":"Facebook. Year Published. Permissions with Facebook Login. https:\/\/developers.facebook.com\/docs\/facebook-login\/guides\/permissions  Facebook. Year Published. Permissions with Facebook Login. https:\/\/developers.facebook.com\/docs\/facebook-login\/guides\/permissions"},{"key":"e_1_3_2_1_13_1","volume-title":"Canarytrap: Detecting data misuse by third-party apps on online social networks. arXiv preprint arXiv:2006.15794","author":"Farooqi Shehroze","year":"2020","unstructured":"Shehroze Farooqi , Maaz Musa , Zubair Shafiq , and Fareed Zaffar . 2020 . Canarytrap: Detecting data misuse by third-party apps on online social networks. arXiv preprint arXiv:2006.15794 (2020). Shehroze Farooqi, Maaz Musa, Zubair Shafiq, and Fareed Zaffar. 2020. Canarytrap: Detecting data misuse by third-party apps on online social networks. arXiv preprint arXiv:2006.15794 (2020)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445164"},{"key":"e_1_3_2_1_15_1","volume-title":"Twelfth Symposium on Usable Privacy and Security (SOUPS","author":"Forget Alain","year":"2016","unstructured":"Alain Forget , Sarah Pearman , Jeremy Thomas , Alessandro Acquisti , Nicolas Christin , Lorrie\u00a0Faith Cranor , Serge Egelman , Marian Harbach , and Rahul Telang . 2016 . Do or do not, there is no try: user engagement may not improve security outcomes . In Twelfth Symposium on Usable Privacy and Security (SOUPS 2016). 97\u2013111. Alain Forget, Sarah Pearman, Jeremy Thomas, Alessandro Acquisti, Nicolas Christin, Lorrie\u00a0Faith Cranor, Serge Egelman, Marian Harbach, and Rahul Telang. 2016. Do or do not, there is no try: user engagement may not improve security outcomes. In Twelfth Symposium on Usable Privacy and Security (SOUPS 2016). 97\u2013111."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/HCI2018.177"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445387"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3392561.3394642"},{"key":"e_1_3_2_1_19_1","volume-title":"Privacy and Identity Management for Life: 6th IFIP WG 9.2, 9.6\/11.7, 11.4, 11.6\/PrimeLife International Summer School","author":"Holtz Leif-Erik","year":"2010","unstructured":"Leif-Erik Holtz , Katharina Nocun , and Marit Hansen . 2011. Towards displaying privacy information with icons . In Privacy and Identity Management for Life: 6th IFIP WG 9.2, 9.6\/11.7, 11.4, 11.6\/PrimeLife International Summer School , Helsingborg, Sweden, August 2-6, 2010 , Revised Selected Papers 6. Springer , 338\u2013348. Leif-Erik Holtz, Katharina Nocun, and Marit Hansen. 2011. Towards displaying privacy information with icons. In Privacy and Identity Management for Life: 6th IFIP WG 9.2, 9.6\/11.7, 11.4, 11.6\/PrimeLife International Summer School, Helsingborg, Sweden, August 2-6, 2010, Revised Selected Papers 6. Springer, 338\u2013348."},{"key":"e_1_3_2_1_20_1","volume-title":"Privacy and Identity Management for Life","author":"Holtz Leif-Erik","unstructured":"Leif-Erik Holtz , Harald Zwingelberg , and Marit Hansen . 2011. Privacy policy icons . In Privacy and Identity Management for Life . Springer , 279\u2013285. Leif-Erik Holtz, Harald Zwingelberg, and Marit Hansen. 2011. Privacy policy icons. In Privacy and Identity Management for Life. Springer, 279\u2013285."},{"key":"e_1_3_2_1_21_1","volume-title":"Eleventh Symposium On Usable Privacy and Security (SOUPS","author":"Kang Ruogu","year":"2015","unstructured":"Ruogu Kang , Laura Dabbish , Nathaniel Fruchter , and Sara Kiesler . 2015 . \u201c my data just goes everywhere:\u201d user mental models of the internet and implications for privacy and security . In Eleventh Symposium On Usable Privacy and Security (SOUPS 2015). 39\u201352. Ruogu Kang, Laura Dabbish, Nathaniel Fruchter, and Sara Kiesler. 2015. \u201cmy data just goes everywhere:\u201d user mental models of the internet and implications for privacy and security. In Eleventh Symposium On Usable Privacy and Security (SOUPS 2015). 39\u201352."},{"key":"e_1_3_2_1_22_1","volume-title":"USENIX Symposium on Usable Privacy and Security (SOUPS). 341\u2013358","author":"Mai Alexandra","year":"2020","unstructured":"Alexandra Mai , Katharina Pfeffer , Matthias Gusenbauer , Edgar Weippl , and Katharina Krombholz . 2020 . User Mental Models of Cryptocurrency Systems \u2014 A Grounded Theory Approach . In USENIX Symposium on Usable Privacy and Security (SOUPS). 341\u2013358 . Alexandra Mai, Katharina Pfeffer, Matthias Gusenbauer, Edgar Weippl, and Katharina Krombholz. 2020. User Mental Models of Cryptocurrency Systems \u2014 A Grounded Theory Approach. In USENIX Symposium on Usable Privacy and Security (SOUPS). 341\u2013358."},{"key":"e_1_3_2_1_23_1","volume-title":"Cognitive artifacts. Designing interaction: Psychology at the human-computer interface 1, 1","author":"Norman A","year":"1991","unstructured":"Donald\u00a0 A Norman . 1991. Cognitive artifacts. Designing interaction: Psychology at the human-computer interface 1, 1 ( 1991 ), 17\u201338. Donald\u00a0A Norman. 1991. Cognitive artifacts. Designing interaction: Psychology at the human-computer interface 1, 1 (1991), 17\u201338."},{"key":"e_1_3_2_1_24_1","volume-title":"conventions, and design. interactions 6, 3","author":"Norman A","year":"1999","unstructured":"Donald\u00a0 A Norman . 1999. Affordance , conventions, and design. interactions 6, 3 ( 1999 ), 38\u201343. Donald\u00a0A Norman. 1999. Affordance, conventions, and design. interactions 6, 3 (1999), 38\u201343."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2018-0029"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3579595"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445465"},{"key":"e_1_3_2_1_28_1","first-page":"181","article-title":"DaPIS: A data protection icon set to improve information transparency under the GDPR","volume":"252","author":"Rossi Arianna","year":"2019","unstructured":"Arianna Rossi and Monica Palmirani . 2019 . DaPIS: A data protection icon set to improve information transparency under the GDPR . Knowledge of the Law in the Big Data Age 252 , 181 - 195 (2019), 5\u20135. Arianna Rossi and Monica Palmirani. 2019. DaPIS: A data protection icon set to improve information transparency under the GDPR. Knowledge of the Law in the Big Data Age 252, 181-195 (2019), 5\u20135.","journal-title":"Knowledge of the Law in the Big Data Age"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-07668-3_37"},{"key":"e_1_3_2_1_30_1","volume-title":"Handbook for the modular extension of the User Experience Questionnaire.","author":"Schrepp Martin","year":"2019","unstructured":"Martin Schrepp and J\u00f6rg Thomaschewski . 2019. Handbook for the modular extension of the User Experience Questionnaire. Retrieved from www. ueq-online. org ( 2019 ). Martin Schrepp and J\u00f6rg Thomaschewski. 2019. Handbook for the modular extension of the User Experience Questionnaire. Retrieved from www. ueq-online. org (2019)."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3555763"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3378393.3402235"},{"key":"e_1_3_2_1_33_1","volume-title":"Fourteenth Symposium on Usable Privacy and Security (SOUPS). 395\u2013409","author":"Wu Justin","year":"2018","unstructured":"Justin Wu and Daniel Zappala . 2018 . When is a tree really a truck? exploring mental models of encryption . In Fourteenth Symposium on Usable Privacy and Security (SOUPS). 395\u2013409 . Justin Wu and Daniel Zappala. 2018. When is a tree really a truck? exploring mental models of encryption. In Fourteenth Symposium on Usable Privacy and Security (SOUPS). 395\u2013409."},{"key":"#cr-split#-e_1_3_2_1_34_1.1","doi-asserted-by":"crossref","unstructured":"Leah Zhang-Kennedy Sonia Chiasson and Robert Biddle. 2013. Password advice shouldn't be boring: Visualizing password guessing attacks. In 2013 APWG eCrime Researchers Summit. 1-11. https:\/\/doi.org\/10.1109\/eCRS.2013.6805770 10.1109\/eCRS.2013.6805770","DOI":"10.1109\/eCRS.2013.6805770"},{"key":"#cr-split#-e_1_3_2_1_34_1.2","doi-asserted-by":"crossref","unstructured":"Leah Zhang-Kennedy Sonia Chiasson and Robert Biddle. 2013. Password advice shouldn't be boring: Visualizing password guessing attacks. In 2013 APWG eCrime Researchers Summit. 1-11. https:\/\/doi.org\/10.1109\/eCRS.2013.6805770","DOI":"10.1109\/eCRS.2013.6805770"},{"key":"e_1_3_2_1_35_1","volume-title":"Hybrid password meters for more secure passwords\u2013a comprehensive study of password meters including nudges and password information. Behaviour & Information Technology","author":"Zimmermann Verena","year":"2022","unstructured":"Verena Zimmermann , Karola Marky , and Karen Renaud . 2022. Hybrid password meters for more secure passwords\u2013a comprehensive study of password meters including nudges and password information. Behaviour & Information Technology ( 2022 ), 1\u201344. Verena Zimmermann, Karola Marky, and Karen Renaud. 2022. Hybrid password meters for more secure passwords\u2013a comprehensive study of password meters including nudges and password information. Behaviour & Information Technology (2022), 1\u201344."}],"event":{"name":"CSCW '23: Computer Supported Cooperative Work and Social Computing","location":"Minneapolis MN USA","acronym":"CSCW '23","sponsor":["SIGCHI ACM Special Interest Group on Computer-Human Interaction"]},"container-title":["Computer Supported Cooperative Work and Social Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3584931.3606962","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3584931.3606962","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:08:46Z","timestamp":1750183726000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3584931.3606962"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,14]]},"references-count":36,"alternative-id":["10.1145\/3584931.3606962","10.1145\/3584931"],"URL":"https:\/\/doi.org\/10.1145\/3584931.3606962","relation":{},"subject":[],"published":{"date-parts":[[2023,10,14]]},"assertion":[{"value":"2023-10-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}