Access controls are an inescapable and deceptively mundane requirement for accessing digital applications and platforms. These systems enable and enforce practices related to access, ownership, privacy, and surveillance. Companies use access controls to dictate and enforce terms of use for digital media, platforms, and technologies. The technical implementation of these systems is well understood. However, this paper instead uses digital game software and platforms as a case study to analyze the broader socio-technical, and often inequitable, interactions these elements regulate across software systems. Our sample includes 200 digital games and seven major digital gaming platforms. We combine close reading and content analysis to examine the processes of authentication and authorization within our samples. While the ubiquity of these systems is a given in much academic and popular discourse, our data help empirically ground this understanding and examine how these systems support user legibility and surveillance, and police identities in under-examined ways. We suggest changes to the policies and practices that shape these systems to drive more transparent and equitable design.
AlsoubaiAAnarakyRGLiY, et al (2022) Permission vs. app limiters: profiling smartphone users to understand differing strategies for mobile privacy management. In: Proceedings of CHI conference on human factors in computing systems, pp. 1–18.
2.
AntónAIEarpJBHeQ, et al (2004) Financial privacy policies and the need for standardization. IEEE Security and Privacy2(2): 36–45.
3.
AssiotisMTzanovV (2006) A distributed architecture for MMORPG. In: Proceedings of 5th ACM SIGCOMM workshop on Network and system support for games.
4.
AvedonESutton-SmithB (eds), (1971) The Study of Games. John Wiley and Sons.
5.
BackesMBerrangPGogaO, et al (2016) On profile linkability despite anonymity in social media systems. In: Proceedings of the 2016 ACM Workshop on Privacy in the Electronic Society, pp. 22–35.
BaltzarPTurunenMHassanL (2022) Popular accessibility settings in digital games: what accessibility settings do players with disabilities use and need? In: Proceedings of the 25th International Academic Mindtrek Conference, pp. 359–363.
BoellaBHulstijnJvan der TorreL (2005) Argument games for interactive access control. In: The proceedings of the the 2005 IEEE/WIC/ACM international conference on web intelligence (WI'; IEEE.
10.
BoellstorffTSodermanB (2017) Transplatform: culture, context, and the intellivision/Atari VCS rivalry. Games and Culture14(6): 680–703.
11.
BonneauJHerleyCVan OorschotPC, et al (2012) The quest to replace passwords: a framework for comparative evaluation of web authentication schemes. In 2012 IEEE Symposium on Security and Privacy,553–567.
12.
BöhmeRKöpsellS (2010) Trained to accept? a field experiment on consent dialogs. In: Proceedings of the SIGCHI conference on human factors in computing systems, pp. 2403–2406.
BuolamwiniJGebruT (2018Gender shades: intersectional accuracy disparities in commercial gender classification. In: Conference on fairness, accountability and transparency, pp. 77–91.
15.
BurkDL (2010) Authorization and Governance in Virtual Worlds. First Monday, 2012–2033.
16.
CaplanRboydd (2016) Who controls the public sphere in an era of algorithms?Mediation, Automation, Power. 1–19.
17.
ChoDKwonKH (2015) The impacts of identity verification and disclosure of social cues on flaming in online user comments. Computers in Human Behavior51: 363–372.
18.
ClarkeR (1988) Information technology and dataveillance. Commun. ACM, Vol. 31, 498–512.
19.
ClaußS (2006) A framework for quantificati.on of linkability within a privacy-enhancing identity management system. In: International conference on emerging trends ininformation and communication security, pp. 191–205.
20.
ColeFL (1988) Content analysis: process and application. Clininical Nurse Specialist2(1): 53–57.
21.
CrenshawNNardiB (2014) What’s in a name? Naming practices in online video games. In: Proceedings of the first ACM SIGCHI annual symposium on computer-human interaction in play. , pp. 67–76.
22.
CreswellJWCreswellD (2017) Research Design: Qualitative, Quantitative, and Mixed Methods Approaches. Sage Publications Ltd.
23.
CvrčekDMatyasVKumpoštM (2005) A privacy classification model based on linkability valuation. Security and Embedded Systems. 91–98.
24.
DahlgrenP (2005) The Internet, public spheres, and political communication: dispersion and deliberation. Political Communication22(2): 147–162.
25.
DotanY (2010) Techniques for authenticating users of massive multiplayer online role playing games using adaptive authentication. U.S. Patent8: 370–389, issued February 5, 2013.
26.
Downe-WamboldtB (1992) Content analysis: method, applications, and issues. Health Care for Women International13(3): 313–321.
27.
DrazewskiKGalassiAJablonowskaA, et al (2021) A corpus for multilingual analysis of online terms of service. Association for Computation Linguistics.
28.
DrazM (2018) Burning it in? Nietzsche, gender, and externalized memory. Feminist Philosophy Quarterly4(2).
29.
EglistonB (2020) Quantified play: self-tracking in videogames. Games and Culture15(6): 707–729.
FeltAPHaEEgelmanS, et al (2012) Android permissions: User attention, comprehension, and behavior. In: Proceedings of the eighth symposium on useable privacy and security, pp. 1–14.
FrikAKimJSanchezJR, et al (2022) Users’ expectations about and use of smartphone privacy and security settings. In: Proceedings of CHI conference on human factors in computing systems, pp. 1–24.
38.
GadamerHG (2006) Classical and philosophical hermeneutics. Theory, Culture and Society23(1): 29–56.
39.
GallowayAR (2006) Gaming: Essays on Algorithmic Culture. University of Minnesota Press.
40.
GallowayAR (2012) The Interface Effect. Polity.
41.
GarberL (2013) Game accessibility: enabling everyone to play. Computer46(06): 14–18.
42.
GardnerDLTanenbaumT (2021) At the edge: periludic elements in game studies. Game Studies21(4).
GauthierDickeyCZappalaDLoV, et al (2004) Low latency and cheat-proof event ordering for peer-to-peer games. In: Proceedings of the 14th international workshop on Network and operating systems support for digital audio and video, pp. 134–139.
45.
GomezJPinnickTSoltaniA (2009) KnowPrivacy. UC Berkeley School of Information Report.
46.
GoodNSGrossklagsJMulliganDK, et al. (2007) Noticing notice: a large-scale experiment on the timing of software license agreements. In: Proceedings of the SIGCHI conference on human factors in computing systems, pp. 607–616.
47.
GraceTLarsonISalenK (2022) Policies of misconduct: a content analysis of codes of conduct for online multiplayer games. In Proceedings of ACM human-computer interactions in play.
48.
GrantJMMottetLATanisJJ, et al. (2011) Transgender Discrimination Survey. Washington, DC, USA: National Center for Transgender Equality and National Gay and Lesbian Task Force.
49.
GreggM (2015) Inside the Data Spectacle. Television and New Media16(1): 37–51.
50.
GrinvaldLCTur-SinaiO (2019) Intellectual property law and the right to repair. Fordham L Rev88: 63.
51.
GruningJ (2017) Models for ownership: implications for long-term relationships to objects. In: Proceedings of the 2017 CHI conference extended abstracts on human factors in computing systems, pp. 2607–2613.
HaggertyJHughes-RobertsTHagartyR (2015) Hobson’s choice: security and privacy permissions in android devices. In: International conference on human aspects of information security, pp. 506–516. Privacy, and Trust.
54.
HaggertyKDEricsonRV (2000) The surveillant assemblage. The British Journal of Sociology51(4): 605–622.
55.
HaimsonOLHoffmannAL (2016) Constructing and Enforcing“ Authentic” Identity Online: Facebook, Real Names, and Non-normative Identities. First Monday.
56.
HaimsonOLBrubakerJRDombrowskiL, et al (2016) Digital footprints and changing networks during online identity transitions. In: Proceedings of the 2016 CHI conference on human factors in computing systems, pp. 2895–2907.
57.
HassanLBaltzarP (2022) Social aspects in game accessibility research: a literature review. DiGRA’22–Proceedings of the 2022 digra international conference: bringing worlds together. DiGRA online library.
58.
HsiehHFShannonSE (2005) Three approaches to qualitative content analysis. Qualiative Health Research15(9): 1277–1288.
59.
JagannathKSalenK (2022) Beyond just rules: server rules for shaping positive experiences in an online play community for youth. In: Proceedings of ACM human-computer interaction in play 2022.
60.
JamesSHermanJRankinS, et al (2016) The Report of the 2015 US Transgender Survey. Center for Victim Research.
61.
JinHShenHJainM, et al (2021) Lean privacy review: collecting users’ privacy concerns of data practices at a low cost. ACM Transactions on Computer-Human Interaction (TOCHI)28: 1–55.
62.
JuulJ (2011) Half-real: Video Games between Real Rules and Fictional Worlds. MIT press.
63.
KayMTerryM (2010) Textured agreements: re-envisioning electronic consent. In: Proceedings of the sixth symposium on useable privacy and security, pp. 1–13.
64.
KretzschmarMStanfillM (2019) Mods as lightning rods: a typology of video game mods, intellectual property, and social benefit/harm. Social and Legal Studies28(4): 517–536.
65.
KrugS (2000) Don’t Make Me Think! A Commone Sense Approach to Web Usability. Pearson Education India.
66.
KushinMJKitchenerK (2009) Getting Political on Social Network Sites: Exploring Online Political Discourse on Facebook. First Monday.
67.
LämmelPTcholtchevNSchieferdeckerI (2017) Enhancing cloud based data platforms for smart cities with authentication and authorization features. In: Companion proceedings of the10th international conference on utility and cloud computing, pp. 167–172.
68.
LampeCZubePLeeJ, et al (2014) Crowdsourcing civility: A natural experiment examining the effects of distributed moderation in online forums. Government Information Quarterly31: 317–326.
69.
LevyKChasalowKERileyS (2021) Algorithms and decision-making in the public sector. Annual Review of Law and Social Science17: 309–334.
70.
LiTReimanKAgarwalY, et al (2022) Understanding challenges for developers to create accurate privacy nutrition labels. In: Proceedings of CHI conference on human factors in computing systems, pp. 1–24.
71.
LillardM (1995) Emmanuel “Cereal Killer” Goldstein. United Artists: Hackers.
72.
LippiMPalkaPContissaG, et al. (2019) CLAUDETTE: an automated detector of potentially unfair clasuses in online terms of service. Artificial Intelligence and Law27(2): 117–139.
73.
LiuZWangXLiX, et al. (2022) Protecting privacy on mobile apps: a principal–agent perspective. ACM Transactions on Computer-Human Interaction (TOCHI)29: 1–32.
74.
MaMAgarwalR (2007) Through a glass darkly: information technology design, identity verification, and knowledge contribution in online communities. Information Systems Research18: 42–67.
75.
MarkyKRagozinKChernyshovG, et al. (2022) Nah, it’s just annoying!” a deep dive into user perceptions of two-factor authentication. ACM Transactions on Computer-Human Interaction29(5): 1–32.
76.
MiesenbergerKOssmannRArchambaultD, et al. (2008) More than just a game: accessibility in computer games. In HCI and usability for education and work: 4th symposium of the workgroup human-computer interaction and usability engineering of the austrian computer society, USAB 2008, Graz, Austria, November 20-21, 2008, pp. 247–260. Springer Berlin Heidelberg.
77.
MontfortNBogostI (2009) Racing the Beam: The Atari Video Computer System. MIT Press.
78.
NejadNMScerriSAuerS (2017) Semantic similarity based clustering of license excerpts for improved end-user interpretation. In: Proceedings of the 13th international conference on semantic systems, pp. 144–151.
79.
NejadNMScerriSAuerS, et al.(2016) Eulaide: interpretation of end-user license agreements using ontology-based information extraction. In: Proceedings of the 12th international conference on semantic systems, pp. 73–80.
80.
NissenbaumH (2009) Privacy in Context. Stanford University Press.
81.
ObarJAOeldorf-HirschA (2020) The biggest lie on the internet: ignoring the privacy policies and terms of service policies of social networking services. Information, Communication and Society23(1): 128–147.
82.
PapacharissiZ (2004) Democracy online: civility, politeness, and the democratic potential of online political discussion groups. New Media and Society6: 259–283.
PfitzmannAKöhntoppM (2001) Anonymity, unobservability, and pseudonymity—a proposal for terminology. Designing privacy enhancing technologies. 1–9.
85.
PorterJRKientzJA (2013) An empirical study of issues and barriers to mainstream video game accessibility. In: Proceedings of the 15th international ACM SIGACCESS conference on computers and accessibility, pp. 1–8.
86.
PostigoH (2008) Video game appropriation through modifications: attitudes concerning intellectual property among modders and fans. Convergence14(1): 59–74.
87.
RainieLAndersonJ (2017) Code Dependent: Pros and Cons of the Algorithmic Age. Pew Research Center.
88.
RajiIDGebruTMitchellM, et al (2020) February. saving face: investigating the ethical concerns of facial recognition auditing. In: Proceedings of the AAAI/ACM Conference on AI, pp. 145–151. Ethics, and Society.
89.
RothY (2015) “No overly suggestive photos of any kind”: Content management and the policing of self in gay digital communities. Communication, Culture and Critique, 8(3): 414–432.
90.
RuizCDomingoDMicóJL, et al. (2011) Public sphere 2.0? the democratic qualities of citizen debates in online newspapers. The International Journal of Press/politics16: 463–487.
91.
RuotiSRobertsBSeamonsK (2015) Authentication melee: a usability analysis of seven web authentication systems. In: Proceedings of the 24th international conference on world wide web, pp. 916–926.
SaidKKaneSK (2013) Button blender: remixing input to improve video game accessibility. CHI’13 Extended Abstracts on Human Factors in Computing Systems. 43–48.
94.
SaldañaJ (2015) The Coding Manual for Qualitative Researchers. Sage Publications Ltd.
95.
Salen-TekinbasKZimmermanE (2003) Rules of Play: Game Design Fundamentals. MIT press.
96.
ScheuermanKWadeKLustigC, et al (2020) How we've taught algorithms to see identity: constructing race and gender in image databases for facial analysis. Proceedings of the ACM on Human-Computer Interaction4(CSCW1): 1–35.
97.
SeaverN (2017) Algorithms as culture: some tactics for the ethnography of algorithmic systems. Big Data and Society4(2): 2053951717738104.
98.
SeaverN (2019) Captivating algorithms: recommender systems as traps. Journal of Material Culture24(4): 421–436.
99.
ScottJC (1998) Seeing like a State. Yale University Press.
100.
SebergerJSShklovskiISwiatekE, et al (2022) Still creepy after all these years: the normalization of affective discomfort in app use. In: Proceedings of CHI conference on human factors in computing systems, pp. 1–19.
SirivianosMKimKGanJW, et al (2014) Leveraging social feedback to verify online identity claims. ACM Transactions on the Web (TWEB)8(2): 1–38.
104.
SomayajiAMouldDBrownC (2013) Towards narrative authentication: or, against boring authentication. In: Proceedings of the 2013 new security paradigms workshop, pp. 57–64.
StampM (2011) Information Security: Principles and Practice. John Wiley and Sons.
107.
StarSL (1999) The ethnography of infrastructure. American Behavioral Scientist43(3): 377–391.
108.
StenrosJ (2017) The game definition game: a review. Games and Culture12(6): 499–520.
109.
StylianouKVenturiniJZingalesN (2015) Protecting user privacy in the cloud: an analysis of terms of service. European Journal of Law and Technology6(3).
110.
SuitsB (1990) Grasshopper: Games, Life, and Utopia. Jaffrey, NH: David R. Godine.
111.
SvenssonSRichterJLMaitre-EkernE, et al (2018) The emerging ‘Right to repair’ legislation in the EU and the US. In: Going Green CAREINNOVATION2018.
TanenbaumTJ (2015) Hermeneutic inquiry for digital games research. The Computer Games Journal4(1): 59–80.
114.
TanenbaumTJ (2020) Publishers: let transgender scholars correct their names. Nature583(7817): 493–494.
115.
TanenbaumTJRettigIShwartzHM, et al (2021) High Level Principles for Name Changes in Publishing. Committee on Publication Ethics.
116.
TaylorTL (2006) Play between Worlds: Exploring Online Game Culture. MIT press.
117.
TaylorTL (2009) The assemblage of play. Games and Culture4(4): 331–339.
118.
TurowJ (2003) Americans and online privacy: the system is broken. Departmental Papers (ASC). University of Pennsylvania, Annenberg Schoolf of Communication.
VertesiJDourishP (2011) The value of data: considering the context of production in data economies. In: Proceedings of the ACM 2011 conference on computer supported cooperative work.
121.
WaddellFTAuriemmaJRSundarSS (2016) Make it simple, or force users to read? paraphrased design improves comprehension of end user license agreements. In: Proceedings of the 2016 CHI conference on human factors in computing systems, pp. 5252–5256.
WallaceR (2014) In: BYuL (ed). Modding: Amateur authorship and how the video game industry is actually getting it right. REv, 219.
125.
WangASPangMPavlouP (2017) Cure or poison? Impact of identity verification on the creation of fake posts on social media. In Proceedings of ICIS2017.
126.
Wardrip-FruinN (2009) Expressive Processing: Digital Fictions, Computer Games, and Software Studies. MIT Press.
127.
Wardrip-FruinN (2020) How Pac-Man Eats. MIT Press.
128.
WillsonM (2017) Algorithms (and the) everyday. Information, Communication and Society20(1), 137–150.
129.
WillsonMLeaverT (2015) Zynga’s FarmVille, social games, and the ethics of big data mining. Communication Research and Practice1(2): 147–158.
130.
WuYEdwardsWKDasS (2022) “A reasonable thing to ask for”: towards a unified voice in privacy collective action. In: Proceedings of the CHI conference on human factors in computing systems, pp. 1–17.
131.
YuanBFolmerEHarrisFC (2011) Game accessibility: a survey. Universal Access in the Information Society10: 81–100.
132.
ZimmerEBurketCPetersenT, et al (2020) PEEPLL: privacy-enhanced event pseudonymisation with limited linkability. In: Proceedings of 35th Annual ACM Symposium on Applied Computing, pp. 1308–1311.
133.
ZimmerM (2008) The Externalities of Search 2.0: The Emerging Privacy Threats when the Drive for the Perfect Search Engine Meets Web 2.0. First Monday.
