A door-hanger permission prompt is displayed every time Pointer Lock is requested. There was work done last year to nicely clean up the Fullscreen permission prompt behaviour (proposed in bug 1129061 and implemented in bug 1160023): http://people.mozilla.org/~mverdi/projects/fullscreen/#game-interactions My proposal would be to show the door-hanger only if the user's permissions are to "Ask" for this site/all sites: example.com wants to disable your mouse cursor. [ Allow ] [ Deny ] If allowed from a secure origin, enter Pointer Lock, always remember that choice and never block on the permission prompt again (unless the user later changes the permission settings). If allowed from a insecure origin, enter Pointer Lock, but only for that page session. Once we have permission to enter Pointer Lock, display a toast notification that disappears after pressing ESC: example.com has disabled your mouse cursor. Press ESC to exit. It's probably worth filing a separate bug, but could the Pointer Lock API make use of the Permissions API (https://w3c.github.io/permissions/#permission-registry)?