Website profiles · Technology insights · Alternatives

hallofshame.design

Protect your online privacy and rights by learning about dark patterns and unethical designs. Stay informed and avoid manipulation in the digital world.

Paid content
Visit website
Profile views 5 Outbound visits 1 Normal
Dark Patterns Hall of Shame Full homepage screenshot

At a glance

Category
Security & Privacy
Language
English
Paid-content signal
Paid contentObserved
Registered
2021
Hosting
CloudflareInferred
HTTPS certificate trusted
PassedObserved
Last updated

Website review

This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.

What is Dark Patterns Hall of Shame?

Dark Patterns Hall of Shame is a catalogue of real-world examples of manipulative interface design. Each entry names a specific company and the tactic it used — for example, LinkedIn training AI on user content, Figma automatically opting users into AI training, Mailchimp's "trick question" sign-up, or Amazon making Audible cancellation deliberately convoluted. The site's purpose is educational: by documenting these cases, it helps people recognise the same tricks when they encounter them elsewhere.

What it covers

The entries are organised around recognised dark pattern categories, and the page evidence shows several in use:

  • Preselection — options already ticked for you, as with Figma's AI training opt-in or Groww's pre-checked credit-score consent box.
  • Roach Motel — easy to enter, hard to leave; the LinkedIn Premium and Audible cancellation write-ups fit here.
  • Obstruction and misdirection — friction and misleading cues that steer you away from the choice you actually want.
  • Nagging — repeated prompts to install an app or enable notifications, as with Reddit and TikTok.
  • Cookie walls and trick questions — access blocked until you accept cookies, or sign-up wording designed to trip you up.
  • Fake scarcity — pressure tactics such as those alleged in the StubHub ticket-sales case.

How to use it

Treat it as a reference library rather than a single read. If you are about to sign up for a service, skim the relevant category first — preselection and nagging entries are the quickest to act on, because the fix is simply unchecking a box or ignoring a prompt. For subscriptions, check the roach motel entries before committing, since cancellation difficulty is the trade-off you are accepting. Designers and product managers can use the same entries as a checklist during review: ask whether a default, a prompt or an extra step exists to serve the user or to serve the metric.

A practical next step: when you meet a new sign-up form, scan it for pre-ticked boxes and confusing double negatives before submitting. That single habit catches the most common pattern documented here.

How can I identify dark patterns in websites and apps?

Start with the pattern, not the brand: dark patterns are interface choices that steer you toward an action you would not have chosen freely. On Dark Patterns Hall of Shame, entries are organized by recognizable tactics, including preselection, privacy zuckering, trick questions, cookie walls, roach motels, obstruction, fake scarcity, misdirection and nagging. That vocabulary is useful because once you can name the trick, you can spot it faster elsewhere.

A practical checklist

  • Check what is already selected. Pre-checked boxes for marketing emails, data sharing, credit checks or AI training are a common form of preselection. The Phosus and Groww examples show how a harmless-looking sign-up screen can quietly opt you in.
  • Read the exact wording of questions and buttons. Trick questions rely on confusing double negatives or mismatched labels. Mailchimp's sign-up process is a documented example.
  • Try to say no, and watch what happens. If declining cookies blocks the content, that is a cookie wall. The HRAcuity entry describes being forced to accept cookies to watch a video.
  • Look for friction around cancellation. A roach motel makes signing up easy and leaving hard. The Audible and LinkedIn Premium entries describe cancellation processes built around obstruction and misdirection.
  • Notice repeated requests after you decline. Reddit's app prompts and TikTok's notification prompts are examples of nagging: the interface keeps asking even after a clear refusal.
  • Separate urgency from fact. Fake scarcity uses countdowns or "only a few left" messages to rush a purchase. StubHub's ticket sales are cited as an example.
  • Check whether your content is being used. Privacy zuckering and AI-training opt-ins can be buried in settings. The LinkedIn and X entries describe content being used to train AI.

How to respond

When you meet one of these patterns, slow down before clicking the prominent button. Look for a smaller, less visible option such as "manage settings," "decline," or "skip." Take a screenshot if a choice is unclear, and check the account settings after signing up to see what was enabled by default. If a service makes cancellation unusually difficult, note the steps before you subscribe.

A useful decision rule: if the interface makes the option that benefits the company obvious and the option that protects you hidden, assume you are looking at a dark pattern until you can find clear, symmetrical choices.

For broader context on manipulative design, the Dark Patterns site maintained by researchers is a long-standing reference.

What are my rights and how can I protect myself from manipulative designs?

Your rights depend on where you live, but the practical pattern is consistent: companies must generally obtain valid consent, avoid misleading interfaces, and let you withdraw from marketing or cancel a service without unreasonable obstacles. The Dark Patterns Hall of Shame is useful as a pattern-recognition library rather than a legal reference: its entries show recurring tactics such as pre-selected opt-ins, cookie walls, trick questions in sign-up flows, nagging prompts, and cancellation journeys labelled as "roach motel" or "obstruction." Those examples map closely onto the rights you can realistically assert: informed consent, easy refusal, and straightforward exit.

A practical protection routine

  1. Read the consent layer, not the marketing copy. Before accepting cookies or creating an account, look for pre-ticked boxes, bundled consent, and wording that treats "continue" as agreement to unrelated uses such as AI training or marketing email.
  2. Assume defaults are not neutral. Pre-selection is one of the most common patterns in the site's examples, from newsletter opt-ins to credit-score checks. Untick anything you did not actively choose, and screenshot the screen if the option is buried.
  3. Separate accounts from marketing. Use a dedicated email address for sign-ups, and treat every checkbox as opt-in unless you have deliberately chosen it.
  4. Test the exit before you need it. If you are considering a subscription, check how cancellation works first. Cancellation flows are where obstruction and misdirection most often appear.
  5. Use the law where it applies. In the EU and UK, consent must be freely given, specific, informed, and unambiguous, and withdrawing consent must be as easy as giving it. In the US, state privacy laws and FTC rules against deceptive practices give you rights to opt out of certain data uses and to expect truthful interfaces. If a company ignores a clear request, a written complaint to its privacy contact, followed by your local data protection authority or consumer regulator, is the normal escalation path.

A concrete scenario

Suppose you sign up for a design tool and later discover your files were used to train an AI model. The relevant question is not whether the feature is useful but whether your consent was valid: was the setting pre-enabled, was it disclosed in plain language, and could you opt out without losing the core service? If the answer to any of those is no, you have grounds to request deletion or withdrawal of consent, and the pattern library's entries on pre-selection and AI training give you the vocabulary to describe what happened.

For wider context on deceptive design and consumer protection, see U.S. Federal Trade Commission and, for EU-facing guidance, European Data Protection Board.

How do I opt out of AI training on platforms like LinkedIn and Figma?

The common thread in both cases is that opting out is usually possible, but rarely where you'd expect it. You typically have to find a privacy or data-use setting, not an AI feature toggle, and you often have to act before or shortly after the company enables training by default.

What the Hall of Shame documents

Dark Patterns Hall of Shame catalogues both cases as "preselection" — you are opted in unless you actively leave. Its entry on LinkedIn describes training AI on user content as a data-and-consent issue where content is used "often without asking first." Its Figma entry notes that when AI features rolled out in early 2025, all users were automatically opted in to having their design files used for AI training. The site frames these as patterns to recognise, not as step-by-step opt-out guides, so treat it as a warning list rather than a manual.

A practical opt-out routine

  1. Go to account settings, then look for Privacy, Data, or "Data controls" — not the AI or Labs section.
  2. Search the settings page for the words "training," "improve," "model," or "content use."
  3. Check whether the control is a toggle, a form, or an objection you must submit in writing.
  4. Screenshot your setting after changing it, and note the date.
  5. Re-check a month later; defaults have a habit of reappearing after product updates.

Why the two platforms differ

LinkedIn Figma
What is used Posts and other content you publish Design files and project content
When it started Rolled out over time, with later notices AI features launched in early 2025 with all users opted in
Where to look Privacy and data settings tied to AI training Account settings for AI features and data use
Main trade-off Opting out may limit AI-assisted features on your own content Opting out may exclude your files from features you might actually want

If you use Figma on a paid work plan, check with your admin first — organisation-level settings may override your personal choice, and a workspace decision affects every file in it. On LinkedIn, the bigger risk is content you posted years ago, so decide whether you want historical posts excluded, not just future ones.

Where to start

If you only have five minutes, open the settings search box on each platform and type "training." If nothing appears, look under Privacy. If you find no control at all, that itself is useful information: it tells you the opt-out is either buried, absent, or handled through a support request, and you can decide whether the service is worth that friction.

How can I cancel subscriptions that use dark patterns, such as Audible or LinkedIn Premium?

Cancelling a subscription that uses dark patterns usually means treating it as a small research task rather than a quick click: find the exit path before you need it, and keep a record of what you did.

Match the pattern to the tactic

The Dark Patterns Hall of Shame catalogues the specific tricks involved. Its entries on Amazon's Audible cancellation and LinkedIn Premium cancellation both describe the "roach motel" pattern — easy to enter, deliberately awkward to leave — while its Mailchimp sign-up entry illustrates a "trick question" that flips the meaning of a checkbox. Recognising the category tells you what to expect.

Pattern What it looks like Practical response
Roach motel Cancel link buried, or a multi-step flow with retention offers Search the help centre for "cancel" rather than hunting the account menu; expect and decline the offer screens
Obstruction Extra confirmation steps, chat-only or phone-only exits Start the process when you have time and a stable connection; screenshot each step
Trick question A checkbox or button whose wording reverses your intent Read every label as if it were opt-out by default; untick anything pre-filled
Nagging Repeated prompts to stay, downgrade or "pause" instead of cancel Decide your answer before you start; don't accept a pause if you want a full exit

Do this before you click

  • Check the renewal date and the amount first, so you know your deadline and whether a refund is worth requesting.
  • Write down the exact date, the steps taken, and any confirmation number or on-screen message. If a chat agent handles it, save the transcript.
  • If the flow offers a "pause" or "downgrade", treat it as a separate decision — it often restarts the clock rather than ending the charge.
  • After cancelling, watch the next one or two billing cycles. A confirmation email is not proof the charge stopped.

A worked example

Suppose your Audible renewal is in ten days. You open the account settings, find no cancel option, and are routed to a help article instead. You follow it through two confirmation screens and a retention offer, decline the offer, and reach a final confirmation. You screenshot that screen and note the date. If a charge appears after the renewal date, you have the evidence to dispute it. The same sequence applies to LinkedIn Premium, where the cancellation path is documented separately in the site's entry.

For a second opinion on a specific company, the U.S. Federal Trade Commission's consumer advice at Consumer Advice explains how to dispute unwanted charges, and Reddit communities often have current, step-by-step cancellation walkthroughs for services that change their flows frequently.

What legal actions have been taken against companies using dark patterns?

Legal action against dark patterns has mostly come from consumer-protection regulators and state attorneys general, not from private lawsuits. The clearest example on Dark Patterns Hall of Shame is StubHub: the site notes that in August 2024 the Washington, D.C. attorney general filed a lawsuit accusing the company of deceptive practices in event ticket sales, tied to obstruction and fake-scarcity tactics. That case shows the typical legal theory—deceptive or unfair commercial practices—rather than a dedicated "dark patterns" statute.

What tends to trigger enforcement

  • Fake urgency and scarcity, such as countdown timers or "only 2 left" claims that aren't true.
  • Obstruction, where cancelling or opting out is made deliberately hard. The site documents this pattern in Amazon's Audible cancellation flow and LinkedIn Premium cancellation.
  • Preselection and consent manipulation, where users are opted in by default. Examples on the site include Figma's AI-training opt-in, X's Grok data setting, and LinkedIn's AI training on user content.
  • Cookie walls, such as HRAcuity forcing cookie acceptance to view a video.

Whose observations these are

The site's entries are its own editorial write-ups, not court records. It reports the D.C. lawsuit against StubHub and describes patterns in named companies' flows. Treat those as allegations and documented UI observations, not proven liability, unless a case has concluded.

Practical next step

If you're evaluating a company or building a product, check whether opt-ins are pre-checked, whether cancellation takes more steps than signup, and whether urgency claims are verifiable. If a pattern looks deceptive, the relevant route is usually a consumer-protection complaint to a regulator or state attorney general, since that's where the StubHub action originated.

Related questions

More questions →
How to Use Ahrefs for Your First SEO Audit: A Step-by-Step Tutorial

If you're new to Ahrefs and want to run your first SEO audit, the fastest path is: open Site Explorer, enter your target URL, review the Overview for a health snapshot, then dig into Organic Keywords, Top Pages, and Site Audit to find specific problems. From there, build a short prioritized to-do list instead of trying to fix everything at once.

This tutorial walks through that workflow using a realistic starting scenario, explains what the numbers mean, and shows how to turn findings into actions.

Before You Start: Pick a Narrow Scope

A common beginner mistake is auditing an entire large website on day one. The reports become overwhelming, and you can't tell which issues matter.

Instead, choose one of these starting points:

  • A single important page (your homepage or a key product/service page)
  • A small site (under ~50 pages, e.g., a personal blog or small business site)
  • One section of a bigger site (e.g., /blog/)

For this tutorial, assume you're auditing a small business site with about 30 pages. The same steps scale up later.

You'll need an Ahrefs account to follow along. Ahrefs offers paid plans, and pricing and feature limits change over time, so check the current Pricing page for what's included in each tier before committing.

Step 1: Enter Your Target in Site Explorer

Site Explorer is Ahrefs' core tool for analyzing any website or URL.

  1. Open Site Explorer from the top navigation.
  2. In the search box, paste your domain (e.g., example.com).
  3. Choose the Exact URL or Domain mode depending on scope. For a full-site view, use Domain or Prefix; for a single page, use Exact URL.
  4. Press Enter.

You'll land on the Overview report. Don't try to absorb everything — focus on four numbers first.

Reading the Overview Snapshot

Metric What it tells you How to use it
Ahrefs Rank (AR) Relative strength of the site's backlink profile vs. others in the database Useful for comparing against competitors, not as a standalone goal
Organic traffic Estimated monthly visits from search A rough trend indicator, not exact analytics
Organic keywords Estimated number of keywords the site ranks for Shows breadth of visibility
Backlinks / Referring domains Total links and unique sites linking to you Referring domains matter more than raw backlink count

Important caveat: Ahrefs' traffic and keyword numbers are estimates based on its own data. They won't match Google Search Console or your analytics exactly. Treat them as directional, not absolute.

Step 2: See What You Already Rank For

Go to Organic Keywords in the left sidebar. This shows queries where your site appears in search results.

Sort by Traffic (descending) to see which pages bring the most estimated visitors. Then look for:

  • Keywords ranking in positions 4–15 — these are often the easiest wins. A small content or on-page improvement can push them onto page one.
  • Keywords with high volume but low position — potential opportunities if the topic is relevant.
  • Irrelevant keywords — if you rank for something off-topic, it may signal thin or mismatched content.

Write down 5–10 of the position 4–15 keywords. These become your first optimization targets.

Step 3: Find Your Best and Weakest Pages

Open Top Pages. This ranks your URLs by estimated organic traffic.

Look for two things:

  1. Your top performers — understand what topics and formats work. Can you create more content like this?
  2. Pages with traffic but poor rankings — these may need on-page fixes (title, headings, internal links).

If a page gets zero traffic and targets a topic you care about, it's a candidate for a rewrite or consolidation.

Step 4: Run a Technical Site Audit

Now move to Site Audit. This crawls your site and flags technical and on-page issues.

  1. Click Site Audit → New project.
  2. Enter your domain and set crawl settings (default is usually fine for a small site).
  3. Start the crawl and wait for it to finish.

Once complete, you'll see a Health Score and a list of issues grouped by category.

Which Issues to Fix First

Not all issues are equal. Prioritize in this order:

Priority Issue type Why it matters
1 Broken links (404s) Bad for users and crawl efficiency
2 Pages blocked from indexing They can't rank at all
3 Missing or duplicate title tags Directly affects click-through and relevance
4 Slow-loading pages Affects experience and rankings
5 Thin content Low value to users and search engines

Ignore low-impact warnings (like minor meta description length) until the big items are handled.

Step 5: Turn Findings Into a To-Do List

You now have raw data. Convert it into a short, actionable list. Example:

  1. Fix 3 broken links found in Site Audit.
  2. Rewrite title tags on 5 pages with duplicate titles.
  3. Improve 4 pages ranking in positions 6–12 by adding missing subtopics and internal links.
  4. Remove or update 2 thin pages with no traffic.

Keep the list to 5–10 items max for your first audit. Finishing a short list beats starting a long one.

Common Beginner Mistakes

  • Chasing every red flag. Site Audit flags many minor issues. Fix what affects rankings and users first.
  • Trusting estimates as exact numbers. Ahrefs data is modeled, not measured from your analytics.
  • Auditing a huge site too early. Start small to learn the interface.
  • Ignoring search intent. A page can be technically perfect but still fail if it doesn't match what searchers want.
  • Forgetting to re-crawl. After fixes, run Site Audit again to confirm improvements.

Where to Go Next

Once your first audit is done:

  • Compare with competitors using Site Explorer's Competing Domains and Content Gap reports.
  • Track keyword rankings over time with Rank Tracker.
  • Explore backlink opportunities in the Backlinks and Link Intersect reports.
  • Set up recurring Site Audit crawls so new issues surface automatically.

Your first audit isn't about perfection — it's about building a repeatable habit: enter a target, read the key reports, pick the highest-impact fixes, and act. Do that once a month and your site's health compounds.

What real-world examples of dark patterns are documented on Dark Patterns Hall of Shame?

Dark Patterns Hall of Shame is a case library that documents real products using manipulative interface design. Its entries pair a named company with the specific dark pattern involved, a short write-up, and a publication date. The cases below are the ones the site itself surfaces, so they double as a working list of documented examples and a sense of how current the coverage is.

Documented cases on the site

Company / product Dark pattern(s) named What the case describes Published
LinkedIn Preselection, Privacy Zuckering Using member content to train AI, with consent framed around data and AI Nov 3, 2025
Figma Preselection, Privacy Zuckering AI features rolled out in early 2025 with all users automatically opted in to have design files used for AI training Sep 4, 2025
Mailchimp Trick Questions Sign-up process built around a deceptive question format Jun 16, 2025
HRAcuity Cookie Wall Forcing cookie acceptance before a visitor can watch a video Mar 29, 2025
Amazon (Audible) Roach Motel, Misdirection, Obstruction A cancellation flow that follows classic patterns designed to complicate the process Dec 5, 2024
Phosus Preselection A sign-up screen that looks straightforward but auto-opts users into marketing emails Nov 28, 2024
Groww Preselection A "pre-approved" loan offer with a pre-checked box granting permission to check the user's credit score Nov 15, 2024
LinkedIn Premium Roach Motel A subscription cancellation flow that is harder than the sign-up experience suggests Sep 22, 2024
StubHub Obstruction, Fake Scarcity Event ticket sales practices that drew a lawsuit from the Washington, D.C. attorney general in August 2024 Aug 12, 2024
X Preselection A setting allowing posted content to be used to train the Grok AI model Jul 31, 2024
Reddit Nagging Persistent prompts to download the app despite clear user disinterest Jul 24, 2024
TikTok Nagging Repeated requests for notification access after the user declines Jul 24, 2024

What the case mix tells you

The pattern names repeat more than the industries do. Preselection appears across social platforms, design tools, fintech apps, and email marketing, which makes it the most common single pattern in this set. Roach Motel and Obstruction cluster around subscriptions and cancellations, where the cost of friction falls on the user trying to leave. Nagging shows up specifically in mobile app prompts.

If you are using the site to check whether a product you rely on has been flagged, search by company name first, then read the pattern label. The label is what lets you compare one case to another; the write-up is what tells you whether the situation matches your own experience.

How current the coverage is

The entries above run from July 2024 to November 2025, with new cases appearing at a rough pace of one every few weeks. That cadence matters for two reasons: a company's absence from the list does not mean it has clean practices, and a company's presence reflects the state of its design at the time of publication, not necessarily today. Check the date on a case before treating it as a description of a product's current behavior.

Reading a case before you act on it

Each entry is short, often one to three minutes of reading. The useful sequence is: identify the pattern name, read what specifically triggered it, then decide whether the fix described (if any) applies to your account. For opt-out cases like Figma or X, the write-up is the part that tells you a setting exists at all. For cancellation cases like Audible or LinkedIn Premium, it tells you what the flow will put in your way before you start.

How to Protect Yourself from Dark Patterns, According to Dark Patterns Hall of Shame

Dark Patterns Hall of Shame is a documentation site that catalogs real examples of manipulative interface design, organized by pattern type and company. You can use it defensively: before you sign up, subscribe, or accept a cookie banner, the site's case library shows you what the trick looks like in practice and what the exit path costs. The protection method it supports is not a single checklist but a habit — slow down at the exact moments where interfaces are designed to speed you up.

What the site actually documents

Each entry pairs a named dark pattern with a specific company and a short write-up. The pattern labels recur across cases, which is what makes the site useful as a reference rather than just a complaint log.

Pattern What it looks like Documented example
Preselection A box is already checked, opting you into something you didn't choose Phosus newsletter signup; Groww credit-score check
Roach Motel Easy to get in, hard to get out LinkedIn Premium cancellation; Amazon Audible cancellation
Obstruction Steps inserted to slow you down StubHub ticket sales
Nagging Repeated prompts after you've declined Reddit app download push; TikTok notification requests
Trick Questions Wording that makes you answer the opposite of your intent Mailchimp sign-up
Cookie Wall Content blocked until you accept cookies HRAcuity video access
Privacy Zuckering Defaults that share more than you expect LinkedIn AI training on your content
Fake Scarcity Manufactured urgency StubHub

The three moments where protection actually happens

Before you submit a form

Preselection is the most common pattern in the site's catalog, and it's the cheapest to defeat. Scan every checkbox, toggle, and pre-filled field before hitting submit. The Groww case is the clearest illustration: a "pre-approved" loan offer with a "Get started" button, and below it a pre-checked box granting permission to pull your credit score. The button is the decoy; the checkbox is the decision.

The same applies to AI training opt-ins. The Figma entry describes AI features rolled out in early 2025 with all users automatically opted in to have their design files used for training. The LinkedIn entry covers the same mechanism for post content feeding AI models. In both cases the default was "in," and the only protection was finding the setting and reversing it.

When you accept a cookie banner

The HRAcuity case is a cookie wall: a video is inaccessible until you accept cookies, with no equivalent path to decline and still view the content. The practical response is to decide whether you actually need that specific piece of content, and if you do, to treat the acceptance as a one-time, site-specific concession rather than a blanket habit. Accepting on every site you visit is how a single wall becomes a default posture.

When you try to leave

Roach Motel entries are the most expensive to escape because the cost is your time. The Audible cancellation write-up describes a process built from several classic patterns stacked together to complicate the exit. LinkedIn Premium cancellation gets a four-minute read for the same reason. The defensive move is to plan the exit before you enter: check how cancellation works while you're still in the trial or first billing period, not when you've decided you're done.

Why the site is worth revisiting

Dark patterns change as companies change. The catalog spans entries from mid-2024 through late 2025, and the pattern mix shifts — AI training consent appears in the newer entries in a way it didn't earlier. Reading a handful of entries in the pattern category you're most exposed to (subscriptions, if you cancel things often; signups, if you trial a lot of tools) gives you the current shape of the trick rather than a stale list.

The site's own framing is that staying informed is the protection. That's accurate but incomplete: information only helps if it arrives before the click. The realistic use is to treat the catalog as a preview — read the Roach Motel entries before you start a subscription you might want to end, and read the Preselection entries before you fill in a form you'll submit in a hurry.

What Is Dark Patterns Hall of Shame?

Dark Patterns Hall of Shame (hallofshame.design) is a website that documents real-world examples of deceptive and manipulative user interface designs — commonly called "dark patterns" — so that ordinary users and designers can recognize them and avoid being manipulated online. It works as a running catalog of case articles, each naming a specific company and the pattern it used, from pre-checked consent boxes to deliberately difficult cancellation flows.

What the site covers

Each entry on the site is a short case write-up. The homepage presents them as a feed of posts, each tagged with the type of dark pattern involved. The patterns named in the site's own headings and excerpts include:

  • Preselection — options that are already checked or enabled by default, so users opt in without noticing.
  • Privacy Zuckering — designs that push users into sharing more personal data than they intended.
  • Trick Questions — wording or layout that makes a form answer mean the opposite of what the user expects.
  • Roach Motel — a service that is easy to sign up for but hard to leave.
  • Obstruction — deliberately adding friction to a task the company doesn't want you to complete.
  • Misdirection — drawing attention away from the choice that matters.
  • Cookie Wall — blocking access to content until cookies are accepted.
  • Nagging — repeated prompts to do something the user has already declined.
  • Fake Scarcity — manufactured urgency or limited availability.

Examples documented on the site

The case list shows how the site applies these labels to named products:

Company Pattern What the case describes
LinkedIn Preselection, Privacy Zuckering Using member content to train AI, with consent handled by default
Figma Preselection AI features rolled out with users automatically opted in to have design files used for AI training
Mailchimp Trick Questions A sign-up process using a deceptive question format
HRAcuity Cookie Wall Forcing cookie acceptance before a video can be viewed
Amazon (Audible) Roach Motel, Misdirection, Obstruction A cancellation flow built to complicate the process
Phosus Preselection A sign-up screen that quietly opts users into marketing emails
Groww Preselection A pre-checked box granting permission to check a credit score
LinkedIn Premium Roach Motel A cancellation flow that is harder than the sign-up
StubHub Obstruction, Fake Scarcity Practices that drew a lawsuit from the D.C. attorney general in August 2024
X Preselection A setting allowing posted content to be used to train its AI, Grok
Reddit Nagging Persistent prompts to download the app
TikTok Nagging Repeated requests for notification access after being declined

Who it's for

The site is written for two overlapping audiences. For everyday users, it functions as a warning list: if a company you use appears here, the entry tells you what to watch for and, in several cases, how to opt out or cancel. For designers and product people, it works as a reference of patterns to avoid, with each case showing how a specific design choice crosses the line from persuasion into manipulation.

How to use it

  1. Open hallofshame.design and scan the feed for a company or product you use.
  2. Read the case to identify which pattern is involved and what the deceptive mechanic is.
  3. Where the entry covers a setting or subscription (for example, AI training opt-outs or a cancellation flow), follow the described steps to change your own configuration.
  4. Use the pattern names — preselection, roach motel, nagging, and so on — as search terms when you want to check whether a new service uses the same tactic.

The site's stated purpose is to help people protect their online privacy and rights by staying informed about these designs. It is a documentation and awareness resource rather than a tool that blocks or fixes dark patterns for you.

What Are Dark Patterns and What Types Does Dark Patterns Hall of Shame Cover?

Dark patterns are deceptive or manipulative user-interface designs that push people into choices they would not otherwise make—such as subscribing, sharing data, or staying in a service they want to leave. The Dark Patterns Hall of Shame is a case library that documents these designs in real products, tagging each entry with a pattern type and explaining how the manipulation works. It is useful if you want to recognize these tactics in your own accounts or cite concrete examples; it is not a legal authority or a complete taxonomy of every pattern in academic research.

How the site organizes its cases

Each entry pairs a named pattern with a specific company and a short write-up. The pattern label tells you the mechanism; the case tells you how it appeared in practice. From the site's own coverage, the recurring types include:

Pattern What it does Example on the site
Preselection Options are pre-checked so inaction equals consent Phosus pre-selecting marketing emails; Groww pre-checking a credit-score permission box
Privacy Zuckering Design nudges you into sharing more data than intended LinkedIn training AI on user content
Obstruction Steps are added to make a desired action hard Amazon's Audible cancellation flow
Roach Motel Easy to enter, hard to leave LinkedIn Premium cancellation
Nagging Repeated prompts to do something you already declined Reddit pushing its app; TikTok requesting notification access
Trick Questions Wording or layout that misleads your answer Mailchimp's sign-up process
Cookie Wall Access is blocked until you accept cookies HRAcuity requiring cookie consent to view a video
Fake Scarcity Artificial urgency or limited-supply pressure StubHub ticket sales (per a D.C. attorney general lawsuit)
Misdirection Attention is drawn away from the consequential choice Listed alongside obstruction in the Audible case

What the individual cases show

Preselection appears most often in the library. The pattern works because the default is treated as consent: a pre-ticked box, an auto-enabled setting, or an opt-out buried after the fact. Figma's 2025 AI rollout is described as automatically opting all users in to have their design files used for AI training—so the "choice" existed but the default did the deciding.

Obstruction and Roach Motel cover the exit side. The Audible cancellation write-up notes the flow follows classic patterns "designed to complicate the process," and the LinkedIn Premium piece frames cancellation as a case where a design promising ease serves a different purpose. The practical takeaway: when leaving is harder than joining, expect extra steps, retention offers, or hidden paths.

Nagging is the mildest but most frequent. Reddit's repeated app-download prompts and TikTok's repeated notification requests are both framed as pushing past a clear decline.

Cookie Wall and Trick Questions sit closer to consent and comprehension. A cookie wall trades access for consent; a trick question makes the "right" answer ambiguous through wording or layout.

How to use it

  1. Identify the mechanism first. Before reading the case, ask what the interface is doing to your default behavior—pre-ticking, hiding, repeating, or blocking.
  2. Check the pattern tag. The site's labels (Preselection, Nagging, Obstruction, etc.) give you vocabulary to describe what you're seeing in other products.
  3. Read the case for the specific flow. The value is in the concrete steps—where the opt-out lives, what the cancellation path looks like—not the label alone.
  4. Verify before acting on a claim. Entries are dated and some reference external events (like the StubHub lawsuit). For anything involving your account or a legal matter, confirm against the company's current settings or official sources.

Limits to keep in mind

The library is a curated collection of examples, not an exhaustive or peer-reviewed classification. Coverage is weighted toward well-known tech products and English-language services, and entries reflect the state of a product at the time of writing—interfaces change. Treat it as a starting point for recognizing manipulation, and check current behavior yourself before drawing conclusions about any specific service.

Website Overview

Identifiable technologies and additional version or configuration signals make the service easier to fingerprint, which may help targeted scanners narrow their checks. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.

Domain and Registration

Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain has about 4 years of registration history; its current configuration provides more context than age alone. The registrar is Porkbun, a widely used domain service provider. Registration contact information is publicly available through RDAP. The domain uses the common .design extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by Cloudflare, indicating managed DNS hosting. No CNAME was found; the observed records resolve directly to addresses. No MX record was found. A conventional explicit inbound-mail route is not configured. TXT records include verification markers for Google. Such markers may also remain after a service stops being used. DNSSEC signatures were not detected, so this additional DNS authenticity protection is not confirmed.

TLS and Certificates

The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued within the Google Trust Services cloud or CDN ecosystem. The certificate's total validity is about 90 days, consistent with a short renewal cycle.

HTTP and Browser Security

X-Powered-By exposes backend information: Express. The checked browser-security headers were not detected, leaving fewer explicit browser-side safeguards. The cf-ray, via response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers. The Server header identifies cloudflare without an exact version.

Technology Stack Analysis

The public page identifies Ghost 6.57, Cloudflare, Express, with exact versions exposed for 1 technologies. These details can narrow vulnerability checks, although exposure alone is not a vulnerability.

Search and Social Sharing

The Generator tag identifies Ghost 6.57, making the publishing system easier to fingerprint. Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 27 characters, within a common display range. A meta description is present, with 152 characters.

Hosting and Email

DNSCloudflare
HostingCloudflare
EmailUnknown
Approximate IP geolocation (inferred; a CDN or proxy may differ from the origin server) Location unknown Inferred 104.21.57.50

Registration details

RDAP / WHOIS

RegistrarPorkbun
Registered2021-12-28
Expires2026-12-28
Domain statusclient transfer prohibited、client delete prohibited
Nameserversadam.ns.cloudflare.com、megan.ns.cloudflare.com
DNSSECunsigned

DNS records

DNS

TypeNameValueTTLPriority
Ahallofshame.design104.21.57.50300—
Ahallofshame.design172.67.141.245300—
AAAAhallofshame.design2606:4700:3031::6815:3932300—
AAAAhallofshame.design2606:4700:3035::ac43:8df5300—
NShallofshame.designadam.ns.cloudflare.com86400—
NShallofshame.designmegan.ns.cloudflare.com86400—
TXThallofshame.designgoogle-site-verification=gSyCZHN9LvTagJ7roOiNo2NkH9laIj2FEg1LM0mFQgA3600—

TLS and certificates

TLS / SSL

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjecthallofshame.design
IssuerGoogle Trust Services
Valid until2026-11-25T08:26 · Remaining when checked: 43 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HTTP

HeaderValue
content-typetext/html; charset=utf-8
cache-controlpublic, max-age=0
servercloudflare

Identified technologies

Ghost 6.57CloudflareExpress

Pages, Search and Sharing

Meta descriptionProtect your online privacy and rights by learning about dark patterns and unethical designs. Stay informed and avoid manipulation in the digital world.
Canonical URLhttps://hallofshame.design/
LanguageEnglish (default)
Twitter Cardsummary_large_image
applebot-extended 0 allowed · 1 disallowed
  • Disallow/
bytespider 0 allowed · 1 disallowed
  • Disallow/
ccbot 0 allowed · 1 disallowed
  • Disallow/
claudebot 0 allowed · 1 disallowed
  • Disallow/
diffbot 0 allowed · 1 disallowed
  • Disallow/
facebookbot 0 allowed · 1 disallowed
  • Disallow/
google-extended 0 allowed · 1 disallowed
  • Disallow/
gptbot 0 allowed · 1 disallowed
  • Disallow/
omgili 0 allowed · 1 disallowed
  • Disallow/
anthropic-ai 0 allowed · 1 disallowed
  • Disallow/
claude-web 0 allowed · 1 disallowed
  • Disallow/
cohere-ai 0 allowed · 1 disallowed
  • Disallow/

User reviews (0)

  • No reviews yet.