Websites are required to obtain user consent for data tracking, yet interface designsoften employ dark patterns like menu depth to steer users toward privacy-invasivechoices. This study investigates how the number of interaction steps required to rejectcookies influences Generation Z users’ decisions (RQ1) and perceived control (RQ2).A mixed-methods approach was used to test 18 participants in a controlledenvironment using a custom mock e-commerce platform. Participants navigated threebanner conditions (1-step, 2-step, and 3-step structures) through a balanced LatinSquare design. Data collection combined quantitative interaction tracking withqualitative think-aloud protocols and semi-structured interviews.The results showed a descriptive trend where acceptance rates rose from 61% in the 1-step condition to 78% in deeper menu structures. Qualitatively, a clear negativerelationship between menu depth and perceived control emerged. As interaction effortincreased, participants’ subjective sense of agency diminished, prompting them toprioritize speed over actual privacy preferences.The study concludes that Generation Z’s preference for rapid interactions makes themhighly susceptible to consent fatigue. Menu depth functions as a structural obstructionthat compromises meaningful consent. These findings emphasize that UX design mustensure refusal is as seamless as acceptance to uphold privacy regulations.