Buried in the setup flow for every Meta Quest headset is a step most owners click through without a second thought.
The device asks you to draw a boundary around your play space, scanning the floor and walls so you do not punch a lamp during a round of Beat Saber.
What sounds like a simple safety feature is also, according to privacy researchers, one of the most detailed spatial scans a consumer gadget has ever collected from inside your home.
The Quest line has shipped with outward-facing cameras since the original model, and each generation has added more sensors.
The Quest 3 packs color passthrough cameras that map your furniture, recognize walls, and track your hands.
Meta markets this as "mixed reality," the killer feature that blends digital objects with your actual couch.
But to blend digital and physical, the headset first has to understand the physical, down to the shape of your room.
Meta's privacy policy for the Quest permits the company to collect "environmental data," including spatial maps, and to use it to improve its services.
Researchers at several universities have flagged that this data, when combined with account information, could build a fairly complete picture of a user's home layout and habits.
Meta says this data stays on the device unless you opt in to share it.
The opt-in language, though, is not exactly written for a casual scroll.
Meta has poured billions into the metaverse while its Reality Labs division bleeds money.
Meanwhile, the company is racing to build the spatial computing layer that Apple, Google, and others also want to own.
Whoever controls the map of your living room controls the storefront for everything from virtual furniture to location-based ads.
That is the real prize, and it explains why the hardware is sold close to cost.
None of this means you should toss your Quest in the trash.
For millions of Americans, it is still the cheapest way to try VR, and the games are genuinely fun.
But if you own one, spend five minutes in the settings menu.
Review your privacy toggles, turn off cloud sync for spatial data if you do not need it, and think twice before letting a headset scan a room you would not want photographed.
The question is who else gets to see what it sees.
The uncomfortable truth is that we have been trained to trade privacy for convenience so smoothly that we barely notice the transaction.
Meta did not hide anything here, exactly.
It just made the important part boring enough that almost nobody reads it.
Final Thoughts
In a world where every gadget wants to map our lives, the least we can do is know what we are handing over, and to whom.