As entertainment and communication technologies develop rapidly, virtual reality and augmented reality are becoming more popular in many different fields, including gaming, social interactions, and shopping. On the other hand, VR and AR developments do not seem to pay enough attention to users' privacy. Many sensors are placed on intermediate devices (such as headsets, controllers) in order to provide immersive experiences for the user, raising privacy concerns and potentially allowing biometric and sensitive data to be extracted. This study aims to analyze this risk and provide practical recommendations for reducing the likelihood of privacy concerns arising from these technologies.