Search Unity

  1. Welcome to the Unity Forums! Please take the time to read our Code of Conduct to familiarize yourself with the forum rules and how to post constructively.
  2. We have updated the language to the Editor Terms based on feedback from our employees and community. Learn more.
    Dismiss Notice
  3. Join us on November 16th, 2023, between 1 pm and 9 pm CET for Ask the Experts Online on Discord and on Unity Discussions.
    Dismiss Notice
  4. Dismiss Notice

Google Data Safety

Discussion in 'Android' started by Munchy2007, Oct 29, 2021.

  1. PeachyPixels

    PeachyPixels

    Joined:
    Feb 17, 2018
    Posts:
    678
    Deleted User likes this.
  2. JeffDUnity3D

    JeffDUnity3D

    Unity Technologies

    Joined:
    May 2, 2017
    Posts:
    14,446
    We use HTTPS/SSL in transit so the second answer is yes. And you should provide an opt out for the user, I believe ads has a separate opt out process. For Analytics: https://docs.unity.com/analytics/ComplyingWithGDPRandCCPA.html
     
  3. Mr-Wolf975

    Mr-Wolf975

    Joined:
    Jun 7, 2013
    Posts:
    11
    What about apps build without any Unity services?
    Build with Unity 2019.4.40f LTS with:
    - IAP package 3.2.3 installed from package manager.
    - but ALL Unity services are disabled. Nothing, nada, no link to Unity services.

    Tests, shows that everything works fine.

    Is there anything collected, in this situation?
    App is for Kids and any data collection will have major implications.

    There is a deadline on 20 July to declare Data safety on Google Play so, please advice.

    Thank you.
     
    Last edited: Jul 15, 2022
  4. JeffDUnity3D

    JeffDUnity3D

    Unity Technologies

    Joined:
    May 2, 2017
    Posts:
    14,446
    Same advice applies, check and confirm with Charles Proxy. If you are not sending anything, nothing is collected. But IAP installation requires Unity Analytics. Unless you've properly disabled everything as stated. But check with Charles or Fiddler to confirm.
     
  5. Mr-Wolf975

    Mr-Wolf975

    Joined:
    Jun 7, 2013
    Posts:
    11
    Charles proxy don't show anything after a brief inspection.

    There are reports that IAP 3.2.3 installed from Package Manager doesn't require Unity services (IAP and/or Analytics).
    https://forum.unity.com/threads/unity-iap-without-analytics-for-kids-games.689143/page-2
    Can you confirm also?

    Thank you.
     
  6. JeffDUnity3D

    JeffDUnity3D

    Unity Technologies

    Joined:
    May 2, 2017
    Posts:
    14,446
    No, IAP still requires Analytics to install. Please share a screenshot of your Services window in the Unity Editor. It will operate without it, but you won't see any IAP revenue on your dashboard and actual IAP sales won't be affected.
     
  7. Mr-Wolf975

    Mr-Wolf975

    Joined:
    Jun 7, 2013
    Posts:
    11
    I'm ok without reporting IAP revenue to the dashboard.
    As you can see I give up any Unity services.
    Unity Analytics package is also removed from Package Manager.


    upload_2022-7-15_16-24-54.png upload_2022-7-15_16-28-22.png
     
  8. JeffDUnity3D

    JeffDUnity3D

    Unity Technologies

    Joined:
    May 2, 2017
    Posts:
    14,446
    Got it! You don't have a cloud projectID so you definitely are not using any Unity services.
     
  9. Mr-Wolf975

    Mr-Wolf975

    Joined:
    Jun 7, 2013
    Posts:
    11
    So, is this working? It seems so. But, it's also something quite radical and I would appreciate if you can let me know if this is a configuration supported by Unity and not end up with I don't know what issues. Except of course, with the Unity services that I'm aware and don't use.

    Are there any data collected in this configuration?
     
  10. JeffDUnity3D

    JeffDUnity3D

    Unity Technologies

    Joined:
    May 2, 2017
    Posts:
    14,446
    I already answered, IAP revenue would not be reported in your case. How would any data be collected if you are not sending any? Sorry if I'm not following.
     
  11. Mr-Wolf975

    Mr-Wolf975

    Joined:
    Jun 7, 2013
    Posts:
    11
    Well, I'm not sending any data particularly. All are collected by Unity. It is quite clear what is collected through enabled services. My question is if there are any outside these services?

    When I read the Unity Privacy Policy there are a lot of, "might", "may", IP Address, location etc. all kind of stuff that cannot be linked only with the Services situation.
     
  12. JeffDUnity3D

    JeffDUnity3D

    Unity Technologies

    Joined:
    May 2, 2017
    Posts:
    14,446
    You have no services enabled so nothing is being sent. And therefore nothing is being stored. We don't send any secret data that I am purposely not telling you about. The "might" and "may" refer to services, specifically custom events with the Analytics service. The "might" and "may" refer to you, the developer, who may be sending custom events or other explicit events. You can confirm with Charles Proxy or Fiddler, which it sounds like you have done.
     
  13. andrefin

    andrefin

    Joined:
    Nov 20, 2017
    Posts:
    1
    Hello, sorry for replying to an old thread, but I'm struggling with the privacy policy and google data safety with my own game.

    I have created a game which does not use any Unity Services, such as Analytics or Ads. I confirmed with Charles Proxy that it doesn't send data anywhere.

    However, I'm quite confused on your comment that no information is being sent if no services are enabled. Doesn't that comment contradict with Unity's privacy policy or am I missing something here? https://unity3d.com/legal/privacy-policy

    Doesn't this specifically state, that Unity collects data automatically? I would appreciate if someone would be able to help me understand what is being collected. Also, what should I put in the games Privacy Policy, if no data is collected?
     
  14. vitorpiresa

    vitorpiresa

    Joined:
    Jan 4, 2019
    Posts:
    7
    Up. I've uploaded a game to Google Play some days ago, i'm not using any of the unity services, but google play alerts me that i'm sending:

    SPLIT_BUNDLE 16: Policy Declaration - Data Safety Section: "Device Or Other IDs Data Type - Device Or Other IDs (some common examples may include Advertising ID, Android ID, IMEI, BSSID)"

    So, i went to the Unity Privacy Policy document, but the paragraph about the base engine data collection it's totally superficial to answer the google requirements.
     
  15. JeffDUnity3D

    JeffDUnity3D

    Unity Technologies

    Joined:
    May 2, 2017
    Posts:
    14,446
    If you are not seeing anything via Charles, then nothing is being sent nor collected. That message is generic and is meant for the user with "may" statements. The IP address is sent because it's part of the TCP/IP protocol. Feel free to send me the Charles capture in a private message and I'll confirm.
     
  16. bullock_william

    bullock_william

    Joined:
    Sep 24, 2020
    Posts:
    1
  17. codekiddddd

    codekiddddd

    Joined:
    Mar 4, 2015
    Posts:
    5
    hi
    this thread https://forum.unity.com/threads/does-disable-hw-statistics-option-also-disable-analytics.627274/
    may(!) be useful for devs on old versions of Unity or those remembering old/removed now option of ‚Disable HW Statistics’ in pre-GDPR times, which worked only on paid versions of Unity, then was free for everybody, now it’s gone and there is Analytics.

    Some excerpts:
    marc_tanenbaum:
    „We've made a decision to give everyone (not just Pro users) the ability to disable all data collection. If memory serves, this capability was introduced in 2018.3.”
    JeffDUnity3D:
    "Turning on/off Analytics does the same thing now. Analytics off also disables hardware stats."
     
  18. petey

    petey

    Joined:
    May 20, 2009
    Posts:
    1,771

    Attached Files:

  19. SunlightGames

    SunlightGames

    Joined:
    Dec 3, 2018
    Posts:
    5
    I searched the web and the Unity forum a lot, getting details of the data safety and data collecting of OLD Unity versions. Our Apps didn't use any extern SDK or any Unity service. No ads, no analytics etc. Nothing! I found only details when games uses Unity services OR for newer Unity versions...
    Everything fine in our Android account, BUT three apps were developed and released years ago, with old versions of Unity. Any maybe there were options to turn off collecting data, our devs didn't do that.
    Google now marked this three apps, as they collect data, even we say, that this wasn't be done in the data safety form.
    Ok for me, to select the data, which will be collected, but I didn't know which data will be collected, because of the old Unity version. Is there any place to see, which data will be collected with the OLD Unity versions 4 (4.5.2f1) and 5 (5.3.4f1 & 5.0.1f1)?
    Or any tool (app in Google Play) except Charles, because getting the old code to run is toomuch work...
    Thanks
     
    Last edited: Jan 11, 2023
  20. codekiddddd

    codekiddddd

    Joined:
    Mar 4, 2015
    Posts:
    5
    Did you get email from Google Play with details? Something like:
    "
    Issue details

    We found an issue in the following area(s):

    • SPLIT_BUNDLE 28: Policy Declaration - Data Safety Section: Device Or Other IDs Data Type - Device Or Other IDs (some common examples may include Advertising ID, Android ID, IMEI, BSSID)”
     
    Last edited: Jan 11, 2023
  21. SunlightGames

    SunlightGames

    Joined:
    Dec 3, 2018
    Posts:
    5
    Oh yes.
    one app:

    Issue details

    We found an issue in the following area(s):

    • APK 2: Policy Declaration - Data Safety Section: Device Or Other IDs Data Type - Device Or Other IDs (some common examples may include Advertising ID, Android ID, IMEI, BSSID)

    And another:
    Issue details

    We found an issue in the following area(s):

    • APK 7: Policy Declaration - Data Safety Section: Device Or Other IDs Data Type - Device Or Other IDs (some common examples may include Advertising ID, Android ID, IMEI, BSSID)
     
  22. codekiddddd

    codekiddddd

    Joined:
    Mar 4, 2015
    Posts:
    5
    The best approach would be of course using newer versions of Unity and/or remove offending apps altogether or abandon them.
    But maybe just declare using 'Device Or Other IDs' in Google Play safety declaration. Probably it’s a part of H/W Stats in old versions of Unity. (I did it in my game but on Unity 2018.4 where H/W Stats was forced disabled by GDPR laws by default, although it’s still processing Device ID).
    Now, it’s probably processed ephemerally (in code) and transmitted encrypted, and if your apps didn’t implemented Privacy Button you can’t request to delete data. Also point to Unity Privacy Policy in Your PP.
    It’s all from my own experience. I don’t think you can get any support for old version of Unity…
    Anyway, good luck!
     
  23. SunlightGames

    SunlightGames

    Joined:
    Dec 3, 2018
    Posts:
    5
    Thanks a lot.
    Make a new build is impossible, even I wish to do that.
    Remove is an option, but first I will try to fill out the form.
    The question is, will the data in the old version transfered encrypted and can user delete them?!

    After searching the web, I found an overview of an old privacy policy of Unity 5, which list the possible collected data, see attached.
     

    Attached Files:

    Last edited: Jan 13, 2023
  24. SunlightGames

    SunlightGames

    Joined:
    Dec 3, 2018
    Posts:
    5
    I select now, that there will be collected "Device Or Other IDs". Then a new form must be filled out, not an idea, what to select there:
    I think the data will be collected, not shared, ok.
    But:
    - will the data session specific processed or not?
    Why will the user data collected (each one can be selected):
    - app functions
    - analysis
    - message from the developer
    - ads or marketing
    - Safety and compiliance
    - personalisation
    - account administration

    Do you have an idea?

    Thanks a lot.
     
  25. codekiddddd

    codekiddddd

    Joined:
    Mar 4, 2015
    Posts:
    5
    Man, you are overthinking it. Just declare whatever is sensible here (or declare pseudo analytics-like options based on https://docs.unity.com/analytics/GoogleDataSafety.html)
    Device IDs:
    - Collected ✔️
    - Ephemerally: for older Unity versions maybe better to say No
    - Data collection is required (users can't turn off this data collection) ✔️
    - Why: Analytics
    .
    You can declare another data this way if you like, but if Google doesn’t say about it, maybe you can just skip it -- look, you have really old Unitys version based apps, just declare what Google send to you and stay low profile with them :]
     
    Munchy2007 likes this.
  26. SunlightGames

    SunlightGames

    Joined:
    Dec 3, 2018
    Posts:
    5
    Thanks a lot. That worked pretty well, Google approved the apps now.
     
    codekiddddd likes this.