Privacy from 5 PM to 6 AM: Tracking and Transparency Mechanisms in the HbbTV Ecosystem

Böttger, Christian; Hosseini, Henry; Utz, Christine; Demir, Nurullah; Hörnemann, Jan; Wressnegger, Christian; Hupperich, Thomas; Pohlmann, Norbert; Große-Kampmann, Matteo; Urban, Tobias

Research article in edited proceedings (conference) | Peer reviewed

Abstract

Hybrid broadcast broadband television (HbbTV) is an evolving technology that connects linear TV with modern HTML5 applications, delivering extras like games, videos, and online shopping. However, its bidirectional transmission functionality raises privacy concerns, as it introduces new tracking methods for TV channels. While previous studies focused on security issues or user awareness of HbbTV privacy challenges, a detailed examination of the tracking and transparency mechanisms of the HbbTV ecosystem is still missing. This study fills this gap by extensively analyzing these features within the European HbbTV ecosystem, and in particular within German-language TV channels. We monitored more than 350 TV channels for over 400 hours, evaluating 1) prevalent HbbTV tracking methods, 2) consent notice prevalence and user interactions, and 3) privacy policy disclosures. Our findings indicate that the HbbTV tracking system operates independently of the Web, consent notices exploit system constraints to influence users, and privacy policies often do not align with actual data practices.

Details about the publication

PublisherCinque, Marcello; Cotroneo, Domenico; De Simone; Luigi; Eckhart, Matthias; P. C. Lee, Patrick; Saman Zonouz
Book titleProceedings of the 2025 55th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)
Page range1-15
Publishing companyWiley-IEEE Computer Society Press
Place of publicationNaples, Italy
StatusPublished
Release year2025 (11/07/2025)
Language in which the publication is writtenEnglish
Conference2025 55th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), Naples, Italy
ISBN979-8-3315-1201-9
DOI10.1109/DSN64029.2025.00017
Link to the full texthttps://ieeexplore.ieee.org/abstract/document/11068807
KeywordsPrivacy Policy; Human-computer Interaction; Privacy Policies; Interactive; Fingerprint; Internet Access; Bilingual; Personal Data; Linear Programming; Privacy Issues; General Data Protection Regulation; Manual Analysis; Technical Data; Smart Home; User Identification; TV Programs; Public Broadcaster; Local Storage; Satellite Networks; User Tracking; HTTP Requests; Red Button; Dark Patterns; Third-party Service; Metadata

Authors from the University of Münster

Hosseini, Henry Simon
Department of Information Systems (WI)
Hupperich, Thomas
Junior professorship of Cyber Security (Prof. Hupperich)