Home▸Articles▸Cybersecurity

AR/VR Sensor Privacy & Gaze-Biometric Exposure Lab (2D): Understanding the Risks of Spatial Mapping and Eye-Tracking

An interactive tool that explores how sensor permissions can compromise user privacy in augmented and virtual reality environments.

mysimulator teamUpdated June 2026≈ 3 min read▶ Open the simulation

What Sensor Permissions Mean

Sensor permissions are critical for applications to access hardware capabilities like the camera or location services. In the context of AR/VR, spatial-mapping and eye-tracking sensors can provide immersive experiences but also pose significant privacy risks by collecting detailed data about a user's environment and gaze patterns.

By toggling these sensor APIs on and off, users can see how their virtual presence in a space is mapped or tracked, which can reveal sensitive information such as room layouts and personal habits.

Impact of Third-Party App Trust

The level of trust granted to third-party apps can significantly affect privacy. Higher levels of trust allow more access to collected data, increasing the risk of unauthorized use or data breaches.

By adjusting the slider for third-party app trust, users can observe how different levels of trust impact the exposure of their gaze biometrics and room layout details.

live demo · related simulation● LIVE

On-Device Privacy Mitigations

Privacy mitigations are measures taken on the device to protect user data. These include features like secure enclaves, encryption, and access controls that can limit how much information is shared with third parties.

By dialing up or down the privacy mitigation strength, users can see how these settings affect the balance between usability and privacy.

Room-Layout Leakage and Gaze-Biometric Identifiability

The 2D floor-plan model allows users to visualize how their virtual presence in a space is mapped. As spatial-mapping permissions are toggled, the room layout can be revealed, potentially compromising privacy.

Gaze biometrics refer to the analysis of eye movements and gaze patterns. By adjusting eye-tracking sensor permissions and third-party app trust, users can see how these factors contribute to identifiability.

Frequently asked questions

How does toggling spatial-mapping affect privacy?

Toggling spatial-mapping on or off allows you to see how your virtual presence in a space is mapped. This can reveal sensitive information about your room layout and personal habits, impacting your privacy.

What are the risks of granting high trust to third-party apps?

Granting higher levels of trust to third-party apps increases the risk of unauthorized use or data breaches, as these apps can access more detailed information about your gaze biometrics and room layout.

How do on-device privacy mitigations work?

On-device privacy mitigations include features like secure enclaves, encryption, and access controls that limit how much information is shared with third parties, helping to protect user data.

What is gaze biometrics and why does it matter?

Gaze biometrics involves the analysis of eye movements and gaze patterns. It matters because these data points can be used for identification purposes, potentially compromising your privacy in AR/VR environments.

Try it live

Everything above runs in your browser — open AR/VR Sensor Privacy & Gaze-Biometric Exposure Lab (2D) and change the parameters while it is running. Nothing is installed, nothing is uploaded, the whole model lives in one tab.

▶ Open AR/VR Sensor Privacy & Gaze-Biometric Exposure Lab (2D) simulation

What did you find?

Add reproduction steps (optional)