Didn’t read the terms and conditions
Didn’t read the terms and conditions
Didn’t read the terms and conditions
A one-night pop-up exhibition about all those ‘I agree’ buttons we click without reading
A one-night pop-up exhibition about all those ‘I agree’ buttons we click without reading
A one-night pop-up exhibition about all those ‘I agree’ buttons we click without reading
Nov 6, 2025
Nov 6, 2025
The Information Lab
The Information Lab
London
London
THE PROBLEM
THE PROBLEM
We all do it. Every time we download an app, update our phone, or sign up for something new, we hit “I agree” without reading a single word.
We all do it. Every time we download an app, update our phone, or sign up for something new, we hit “I agree” without reading a single word.
We all do it. Every time we download an app, update our phone, or sign up for something new, we hit “I agree” without reading a single word.
It’s not laziness — it’s design. Privacy policies are written to be unreadable. In fact, research shows it would take 76 full workdays each year to read every privacy policy you encounter. Nobody has that kind of time.
It’s not laziness — it’s design. Privacy policies are written to be unreadable. In fact, research shows it would take 76 full workdays each year to read every privacy policy you encounter. Nobody has that kind of time.
It’s not laziness — it’s design. Privacy policies are written to be unreadable. In fact, research shows it would take 76 full workdays each year to read every privacy policy you encounter. Nobody has that kind of time.
Hidden inside those endless paragraphs are the real stories of how your data is collected, shared, and used — often in ways you’d never expect. And companies know this. They rely on it.
Hidden inside those endless paragraphs are the real stories of how your data is collected, shared, and used — often in ways you’d never expect. And companies know this. They rely on it.
Hidden inside those endless paragraphs are the real stories of how your data is collected, shared, and used — often in ways you’d never expect. And companies know this. They rely on it.
This exhibition shines a light on what’s usually hidden. It transforms the abstract language of privacy policies into tangible, hands-on experiences — things you can see, touch, and truly understand.
This exhibition shines a light on what’s usually hidden. It transforms the abstract language of privacy policies into tangible, hands-on experiences — things you can see, touch, and truly understand.
This exhibition shines a light on what’s usually hidden. It transforms the abstract language of privacy policies into tangible, hands-on experiences — things you can see, touch, and truly understand.
WHAT I DID ABOUT IT
WHAT I DID ABOUT IT
WHAT I DID ABOUT IT
To bring the problem to life, I created a one-night pop-up exhibition featuring seven interactive installations. Each one uncovers a different truth hidden behind the countless “I agree” buttons we all click without thinking.
To bring the problem to life, I created a one-night pop-up exhibition featuring seven interactive installations. Each one uncovers a different truth hidden behind the countless “I agree” buttons we all click without thinking.
To bring the problem to life, I created a one-night pop-up exhibition featuring seven interactive installations. Each one uncovers a different truth hidden behind the countless “I agree” buttons we all click without thinking.
This wasn’t about blaming or lecturing anyone — because let’s be honest, everyone skips reading those terms. That’s perfectly normal when you’re faced with thousands of words of unreadable legal text.
This wasn’t about blaming or lecturing anyone — because let’s be honest, everyone skips reading those terms. That’s perfectly normal when you’re faced with thousands of words of unreadable legal text.
This wasn’t about blaming or lecturing anyone — because let’s be honest, everyone skips reading those terms. That’s perfectly normal when you’re faced with thousands of words of unreadable legal text.
Instead, my goal was to make people pause and think: “Wait—what am I actually agreeing to?”
Instead, my goal was to make people pause and think: “Wait—what am I actually agreeing to?”
The exhibition used participatory data visualisation, which means visitors didn’t just observe — they became part of the work. By physically interacting with each installation, they helped generate the data that shaped the visuals. When you contribute to a visualisation instead of just viewing it, you remember it, talk about it, and reflect on it long after you leave.
The exhibition used participatory data visualisation, which means visitors didn’t just observe — they became part of the work. By physically interacting with each installation, they helped generate the data that shaped the visuals. When you contribute to a visualisation instead of just viewing it, you remember it, talk about it, and reflect on it long after you leave.
The exhibition used participatory data visualisation, which means visitors didn’t just observe — they became part of the work. By physically interacting with each installation, they helped generate the data that shaped the visuals. When you contribute to a visualisation instead of just viewing it, you remember it, talk about it, and reflect on it long after you leave.
ON THE NIGHT
ON THE NIGHT
ON THE NIGHT
On 6 November 2025, roughly 40 people came to The Information Lab in London to experience #didntreadthetandcs. Here's what happened.
On 6 November 2025, roughly 40 people came to The Information Lab in London to experience #didntreadthetandcs. Here's what happened.
People stacked documents, walked the length of ChatGPT's terms and conditions, listened to uncomfortably relatable audio scenarios, and put stickers on charts showing how privacy policies actually make them feel.
The best part? Watching people realise they weren't alone in clicking 'I agree' without reading. This wasn't about making anyone feel bad - it was about making the invisible visible, together.
People stacked documents, walked the length of ChatGPT's terms and conditions, listened to uncomfortably relatable audio scenarios, and put stickers on charts showing how privacy policies actually make them feel.
The best part? Watching people realise they weren't alone in clicking 'I agree' without reading. This wasn't about making anyone feel bad - it was about making the invisible visible, together.
THE EXHIBITS
THE EXHIBITS
THE EXHIBITS
Full documentation will be added after the exhibition on 6 Nov.
For now, here’s a preview of what visitors experienced inside #didntreadthetandcs:
Here’s a preview of what visitors experienced inside #didntreadthetandcs:
How much have you actually agreed to?
01
I printed out privacy policies for five apps plus phone handsets. You stacked yours to feel the weight. People were shocked.
How much have you actually agreed to?
01
I printed out privacy policies for five apps plus phone handsets. You stacked yours to feel the weight. People were shocked.
What have you actually agreeded to?
02
ChatGPT's full privacy policy and T&Cs, printed and hand-annotated. Walk the length. See which clauses favour you versus the company.
What have you actually agreeded to?
02
ChatGPT's full privacy policy and T&Cs, printed and hand-annotated. Walk the length. See which clauses favour you versus the company.
Did you actually read what you just signed?
03
Everyone signed a photography waiver with a hidden clause: "Give Sophie a high five." Most people didn't read it. Gotcha.
Did you actually read what you just signed?
03
Everyone signed a photography waiver with a hidden clause: "Give Sophie a high five." Most people didn't read it. Gotcha.
What privacy policies sound like in human conversation
04
Three audio recordings translate privacy policy clauses into uncomfortably human scenarios. If a person did this, it'd be creepy. Algorithms do.
What privacy policies sound like in human conversation
04
Three audio recordings translate privacy policy clauses into uncomfortably human scenarios. If a person did this, it'd be creepy. Algorithms do.
Four things you can actually do
05
A small booklet with four practical privacy actions. Stamp the ones you'll actually do. Take it home as a reminder.
Four things you can actually do
05
A small booklet with four practical privacy actions. Stamp the ones you'll actually do. Take it home as a reminder.
How do you feel about it?
06
Three sticker charts: how T&Cs make you feel, how often you read them, and whether you'll take action. Everyone engaged.
How do you feel about it?
06
Three sticker charts: how T&Cs make you feel, how often you read them, and whether you'll take action. Everyone engaged.
How much have you actually agreed to?
01
I printed out privacy policies for five apps plus phone handsets. You stacked yours to feel the weight. People were shocked.
What have you actually agreeded to?
02
ChatGPT's full privacy policy and T&Cs, printed and hand-annotated. Walk the length. See which clauses favour you versus the company.
What have you actually agreeded to?
02
ChatGPT's full privacy policy and T&Cs, printed and hand-annotated. Walk the length. See which clauses favour you versus the company.
How do you feel about it?
05
A small booklet with four practical privacy actions. Stamp the ones you'll actually do. Take it home as a reminder.
How do you feel about it?
05
A small booklet with four practical privacy actions. Stamp the ones you'll actually do. Take it home as a reminder.
Did you actually read what you just signed?
03
Everyone signed a photography waiver with a hidden clause: "Give Sophie a high five." Most people didn't read it. Gotcha.
Did you actually read what you just signed?
03
Everyone signed a photography waiver with a hidden clause: "Give Sophie a high five." Most people didn't read it. Gotcha.
What privacy policies sound like in human conversation
04
Three audio recordings translate privacy policy clauses into uncomfortably human scenarios. If a person did this, it'd be creepy. Algorithms do.
What privacy policies sound like in human conversation
04
Three audio recordings translate privacy policy clauses into uncomfortably human scenarios. If a person did this, it'd be creepy. Algorithms do.
How do you feel about it?
06
Three sticker charts: how T&Cs make you feel, how often you read them, and whether you'll take action. Everyone engaged.
How do you feel about it?
06
Three sticker charts: how T&Cs make you feel, how often you read them, and whether you'll take action. Everyone engaged.
YOU CAN TAKE ACTION
YOU CAN TAKE ACTION
YOU CAN TAKE ACTION
Privacy policies are impossible to read, but that doesn’t mean you’re powerless. Here are four practical things you can do right now:
Turn off ‘Always’ location tracking
Companies track everywhere you go, 24 hours a day. Your work, home, the gym, your doctor’s surgery. Go to your phone settings and change apps to track your location only ‘while using’ them, not constantly in the background. You decide when they can see where you are.
Turn off ‘Always’ location tracking
Companies track everywhere you go, 24 hours a day. Your work, home, the gym, your doctor’s surgery. Go to your phone settings and change apps to track your location only ‘while using’ them, not constantly in the background. You decide when they can see where you are.
Turn off ‘Always’ location tracking
Companies track everywhere you go, 24 hours a day. Your work, home, the gym, your doctor’s surgery. Go to your phone settings and change apps to track your location only ‘while using’ them, not constantly in the background. You decide when they can see where you are.
Know the ICO can help you
If a company violates your privacy rights, you can complain to the ICO (Information Commissioner’s Office) for free. They’re the UK’s data watchdog with real enforcement power. Visit ico.org.uk to file a complaint. Companies actually have to respond.
Know the ICO can help you
If a company violates your privacy rights, you can complain to the ICO (Information Commissioner’s Office) for free. They’re the UK’s data watchdog with real enforcement power. Visit ico.org.uk to file a complaint. Companies actually have to respond.
Know the ICO can help you
If a company violates your privacy rights, you can complain to the ICO (Information Commissioner’s Office) for free. They’re the UK’s data watchdog with real enforcement power. Visit ico.org.uk to file a complaint. Companies actually have to respond.
Use ToS;DR to make better app choices
ToS;DR reads privacy policies for you and gives each service a simple grade from A (great privacy) to E (terrible privacy). Check tosdr.org to see how your current apps rate, and use it before downloading new ones. It helps you make informed choices about which apps and services to trust. Prevention is easier than getting your data back later.
Use ToS;DR to make better app choices
ToS;DR reads privacy policies for you and gives each service a simple grade from A (great privacy) to E (terrible privacy). Check tosdr.org to see how your current apps rate, and use it before downloading new ones. It helps you make informed choices about which apps and services to trust. Prevention is easier than getting your data back later.
Use ToS;DR to make better app choices
ToS;DR reads privacy policies for you and gives each service a simple grade from A (great privacy) to E (terrible privacy). Check tosdr.org to see how your current apps rate, and use it before downloading new ones. It helps you make informed choices about which apps and services to trust. Prevention is easier than getting your data back later.
Do Google’s 5-minute privacy checkup
Google’s Privacy Checkup guides you through your main settings in just 5 minutes. You can turn off location history, web tracking, and YouTube history. You can even set your data to auto-delete every 3 months. Go to myaccount.google.com/privacycheckup and take back some control.
Do Google’s 5-minute privacy checkup
Google’s Privacy Checkup guides you through your main settings in just 5 minutes. You can turn off location history, web tracking, and YouTube history. You can even set your data to auto-delete every 3 months. Go to myaccount.google.com/privacycheckup and take back some control.
Do Google’s 5-minute privacy checkup
Google’s Privacy Checkup guides you through your main settings in just 5 minutes. You can turn off location history, web tracking, and YouTube history. You can even set your data to auto-delete every 3 months. Go to myaccount.google.com/privacycheckup and take back some control.