Gideros and GDPR?

Apollo14 · August 2018

In case someone interested, there's attached screenshots from top games.
They just show standart boring 'terms of use -> accept' button when we start an app first time.

SinisterSoft · August 2018

Are you allowed to stop anyone from using the program because they won't let you capture private data though. I don't think that is allowed.

dreiko65 · August 2018

Maybe we could use the Google consent form. But is there anyone here who could give instruction on how to use it with Gideros? I tried to follow the instructions from google but failed.

Apollo14 · August 2018

I'll just do what top studios do:
1) button "terms of use" -> open url with boring terms of use
2) button "accept" -> continue to game and never show this popup again

oleg · August 2018

@Apollo14 гугл рекомендує не вказувати свої умови конфиденційності, а писати щось типу "гра використовує сервіси гугл ви даєте згоду на їх використання -- ок /або вийти з гри "

**це вмонтовано в самому рекламному банері коли людина перший раз бачить рекламу адмоб показує їй попередження

** також в гуглплей магазині ти ставиш галочку що в додатку є реклама -і користувачі автоматом погоджуються з цим коли скачують додаток з магазину.

https://support.google.com/admob/answer/7666366?hl=uk

якщо хтось користується не лише гугл сервісами - то гугл рекомендує таку форму:

https://www.cookiechoices.org/intl/uk/

for those who do not understand Ukrainian
information in english:
http://www.cookiechoices.org/intl/en-GB/
https://support.google.com/admob/answer/7666366?hl=en

simwhi · August 2018

We've done a lot of work in this area for obtaining consent from the user to show only NPA adverts. We also need to address the issue of analytics. In the meantime we have moved analytics.

dreiko65 · August 2018

@simwhi What is your approach? How did you manage to obtain consent from user and show pna ads?

simwhi · August 2018

@dreiko65 I implemented the Google consent API into the Admob plugin. It's very hacky to be honest as I don't know how to code Gideros plugins correctly.

NatWobble · August 2018

@dreiko65 My understanding is that a take it or leave it message is OK for non-personalised ads. When we filtered our Admob ad statistics we found that we were actually getting lower ECPMs for personalised ads than for non-personalised ads, which is strange. So we decided to use a self-cooked version of the 2nd screen example from the google consent api as shown on https://cookiechoices.org/ (with a few changes). We just show NPA ads in the EEA and send an error message (hacky) to lua to display a message with "Accept" or "Purchase App" options. By doing this, a big headache is removed with obtaining consent.

@Apollo14 Please can you confirm where you are based (Ukraine?)? I'm not sure that it is safe to follow the top apps, especially if you are outside the EEA. You might be getting different messages to users inside the EEA, in the same way that we are showing no message to users outside the EEA at all. We aren't resident in the EEA so its difficult to be sure what other apps are doing inside the EEA.

Apollo14 · August 2018

NatWobble said:
@Apollo14 Please can you confirm where you are based (Ukraine?)? I'm not sure that it is safe to follow the top apps, especially if you are outside the EEA. You might be getting different messages to users inside the EEA, in the same way that we are showing no message to users outside the EEA at all. We aren't resident in the EEA so its difficult to be sure what other apps are doing inside the EEA.

yep, I'm in asian region, outside of EEA

Apollo14 · September 2018

There's update on GDPR issue.

Guys from our local telegram group report that Google started rejecting and banning apps without privacy policy. Most likely because they use ad platforms like StartApp.

Some devs just host pdf file on blogspot/googledrive, it seems to be enough for GP moderators (googledrive link has to be shortened to goo.gl).
One guy has 150 apps banned, 130 were restored after adding link to privacy policy.

Useful link:
https://app-privacy-policy-generator.firebaseapp.com/

oleg · September 2018

@pollo14 Цe завжди так було якщо ти відмічаєш зо твій додаток "для сімей"

я просто взяв текст і посилаюсь на нього з консолі https://simartinfo.blogspot.com/p/what-this-privacy-policy-coversthis.html

https://support.google.com/googleplay/android-developer/answer/113469?visit_id=636730172539406611-782224187&rd=1&hl=en#privacy

dreiko65 · September 2018

Hi, I noticed that Applovin does not process any personal user data if you select this option. Do we need to do anything else from the app side to make this to work or just check this option and we are good to go?

oleg · September 2018

you should in any case have a privacy policy

otherwise your game will not be available in all countries

dreiko65 · September 2018

@oleg thank you buddy.

Unknown · September 2018

thanks

jdbc · November 2018

I think the right solution is to use Admob with the following steps:

1) Show consent dialog
2) If the user gives consent then show Ads
3) If the user does not give consent then allow to purchase the game. If the user rejects to purchase game back to 1

The user can choose freely to use app by showing Ads or purchasing the game.

https://groups.google.com/forum/#!topic/google-admob-ads-sdk/9U7UY4mx858

My question is how user can remove personal data collected by Google when Ads are show, but I think this is a Google problem if you describe it in the privacy policy.

hgy29 · November 2018

jdbc said:

My question is how user can remove personal data collected by Google when Ads are show, but I think this is a Google problem if you describe it in the privacy policy.

That’s my opinion too, however doesn’t google and others need some identifier for that ? Should we display the IDFA ?

jdbc · November 2018

hgy29 said:

jdbc said:

My question is how user can remove personal data collected by Google when Ads are show, but I think this is a Google problem if you describe it in the privacy policy.
That’s my opinion too, however doesn’t google and others need some identifier for that ? Should we display the IDFA ?

It seems that Consent SDK allows to remove consent, so Google should remove personal data in this case. App or game should provide a button to provide this option.

https://developers.google.com/admob/android/eu-consent#change_or_revoke_consent
https://github.com/googleads/googleads-consent-sdk-android

¿Is it this Consent SDK totally integrated in Gideros Admob plugin? I guess this is the solution to publish back my games.

antix · November 2018

It's all so muddy and by that I mean websites will tell you part of what you need to do (and google as well) but I have yet to find one place that actually explains what is required to satisfy the GDPR.

I've just updated both versions of my Descent game. Only one uses admob so before the game loads you have to accept that google will collect your data in order to serve you more relevant adverts, otherwise the game exits back to home-screen, and both have a button in the options menu that links to my crazy privacy policy.

https://play.google.com/store/apps/developer?id=Antix+Development

Is this enough to satisfy GDPR? I don't know.. who does? Really as long as google don't remove my games then I guess it is. I'm also damn sure that if its not enough.. they will remove my games and then I'll know and can try again

Oh, my updates aren't just for GDPR, there are actual functional updates in there too

oleg · November 2018

@antix
Google does not remove games, it deactivates them in those countries where the game violates the law

Google does not check the games I already have in the store, he checks only when the game updates

hgy29 · November 2018

oleg said:

Google does not check the games I already have in the store, he checks only when the game updates

That's no longer true it seems, now games are removed even if they have already been in the store for months. I and @totebo had it happening recently.

SinisterSoft · November 2018

It hasn't happened to me yet, I'm ready for when it does though now.

antix · November 2018

@hgy29 Yours and @totebo's removals were due to something other than adverts though right?

hgy29 · November 2018

GDPR related for me: lack of proper in game privacy warning for using advertising identifier

oleg · November 2018

hgy29 said:

oleg said:

Google does not check the games I already have in the store, he checks only when the game updates
That's no longer true it seems, now games are removed even if they have already been in the store for months. I and @totebo had it happening recently.

most likely someone complained about your games

hgy29 · November 2018

Very unlikely for mine... given the low success it had...

Favfly · November 2018

SinisterSoft said:
Are you allowed to stop anyone from using the program because they won't let you capture private data though. I don't think that is allowed.

I've just got around to updating my game -High Life Slots- to make it compliant with GDPR. I just put a screen-wall asking players to read the policy and/or accept. They can't click anywhere else... so they either accept the policy or they can't play. I really don't think that's unreasonable. I do think it's unreasonable to expect to play my game without giving me something for it: I don't want their money, just their acceptance of my privacy policy. If they don't want to give that, fair enough: but they don't get my game.

Anyway, the game was accepted back onto the store. I'll let you all know if it gets taken down.

SinisterSoft · November 2018

@FavFly were you told you had to add the policy to the apk by google or is this a pre-emptive update?

If you were told, do you have an individual account with google play or a company account?

I'm only asking because I haven't been given any warnings (yet) and the only people so far that I know have... have individual accounts.

simwhi · December 2018

@hgy29 To keep our apps GDPR compliant we haven't implemented Firebase. However, we are experiencing more crashes with Admob.

Would it be possible to implement the following opt-in options for Firebase?

https://firebase.google.com/support/privacy/

Scroll down to: Guides for enabling opt-in for end-user personal data processing

Crashlytics: Enable Opt-in Reporting
Crash Reporting: Enable Opt-in Reporting
Performance Monitoring: Enable Opt-in Monitoring
Analytics: Disable Analytics Collection

Howdy, Stranger!

Categories

In this Discussion

Top Posters

Gideros and GDPR?

Comments

Howdy, Stranger!

Quick Links

Categories

In this Discussion

Top Posters

Gideros and GDPR?

Comments