Google App Data Security form

I use IAP in my Android app (and I think Analytics is added when I do that).

Now, Google requests that I answer many questions about how my app collects and shares data, and I haven’t a clue what I should answer. I must answer things like what kind of data is collected if it is encrypted during transfer and many other questions that I simply cannot answer because I do not know what IAP/Analytics is doing.

Please help.

This might help: Apple privacy survey for Unity Ads

The same here… they are asking very specific details that I have absolutely no idea! I’m looking through the privacy policy looking for some clues but I’m afraid they may suspend the app if I answer something slightly wrong or inconsistent.

2 Likes

This may help http://documentation.cloud.unity3d.com/en/articles/4694233-apple-nutritional-info-unity-analytics

1 Like

The provided links are quite useful. I assume any personal data that is used by IAP, User Reports, and Unity Ads has some form of encryption in transit? I am also not sure of the data listed, which is stored vs shared with a third party, and if stored, if it is processed ephemerally (Simply kept in memory when in use then released, or stored for later use). The one addition that would be useful to each column is if the data is encrypted or not and if the data is stored or simply used.

Yes, encrypted in transit via SSL. Data can be stored https://unity3d.com/legal/privacy-policy

2 Likes

Gotcha thanks! Assumed as much. With all this information the questionnaire should be easy to fill out.

Thanks! The encryption was the last missing piece of information, now I’m good to go.

How would I answer the “Do you provide a way for users to request that their data is deleted?” question. Is it asking if my app specifically has an option to remove data or does this include third parties ( e.g. Unity). As far as I’m aware Unity allows users to delete their data but my app doesn’t directly. What did everyone else put for this?

Apart from being a little confused on that one, this thread has made the rest of the questionnaire easy, thank you!

You could use the Unity Data Privacy button https://docs.unity3d.com/Manual/UnityAnalyticsDataPrivacy.html You can confirm what data your game might be sending by using Charles Proxy (or Fiddler) https://support.unity.com/hc/en-us/articles/115002917683-Using-Charles-Proxy-with-Unity

2 Likes

Awesome! Thank you!

1 Like

Ok, I’m looking into Google’s data privacy form too right now.
They’re asking if the data is either collected or shared.
By default I’d say it’s collected only, whether it’s Unity Ads, Analytics or Purchase.

The trickiest question is whether the data is temporary and kept in memory within the scope of a simple and specific task, or not.
It’s think it’s shoved under long term data and kept until the app is deleted or the cache purged, and it’s also kept on Unity’s servers unless the user asks for the data to be removed.
So is it safe to say that, no, it is NOT temporary?

Do you know what would be nice?

That Apple and Google turned their data privacy checklists into tables of values that are exposed and accessible to the developers of varied tools so they can set it up on their side because they know exactly what is being done with the data, far more than the middle user (app developer) who is more like a customer in such cases.

There are questions that are simply near impossible to answer, for example when you put “other purposes or data” and they then proceed to ask you how it’s used and for what.
You’re like… crickets the hell I know?

3 Likes

Yes I agree. All this enforcing of rules often just crushes ‘normal’ developers. I want my users to be happy, I want to be able to solve their problems if they send an email of complaints. I think 99% of the time we do not want to rule an empire based of ‘free apps’ that sell and buy user content without their consent BUT we are forced to use that tools because everyone does and we are expected to use them. Technology unfortunately is evolving both in being more technically accessibile but also more burocatic daunting.
Not fun at all but I’m glad I haven’t many plugins.

3 Likes

When pushing our plugin demo to play store, we noticed the same issue recently. We don’t have anything like unity analytics/purchases where it involves servers. All we have is our plugin demo alone and its totally local and we don’t connect to any. Still wondering whats causing the problem!

Even with just the Unity and not using unity analytics, any data is still collected under the hood?