Google Play (Issue found: Invalid Data safety section)

d954mas · June 27, 2022, 6:55pm

I’m updating my app in Play Market. And get warning from google
SPLIT_BUNDLE 1: Policy Declaration - Data Safety Section: Device Or Other IDs Data Type - Device Or Other IDs (some common examples may include Advertising ID, Android ID, IMEI, BSSID)

I do not collect anything, there are no analysts.

1)Defold 1.3.3
2)permissions

<uses-permission android:name="android.permission.WAKE_LOCK" />

3)Dependencies

dependencies#0 = https://github.com/AGulev/jstodef/archive/1.3.0.zip
dependencies#1 = https://github.com/DanEngelbrecht/LuaScriptInstance/archive/master.zip
dependencies#2 = https://github.com/d954mas/defold-box2d/archive/refs/tags/0.9.2.zip

d954mas · June 27, 2022, 6:58pm

I have no ideas, how google detect it.
I upload my game to “Open testing” and after review(1-2 hours) get email from google.

d954mas · June 27, 2022, 7:01pm

Maybe it something with android_id?
Defold always try to get it

github.com

defold/defold/blob/6b03d6f75afb1411f62d96850cd8d94b1971916e/engine/dlib/src/dlib/sys.cpp#L754

    
      
              }
          
          
    jclass activity_class = env->FindClass("android/app/NativeActivity");
              jmethodID get_content_resolver_method = env->GetMethodID(activity_class, "getContentResolver", "()Landroid/content/ContentResolver;");
              jobject content_resolver = env->CallObjectMethod(thread.GetActivity()->clazz, get_content_resolver_method);
          
          
    jclass secure_class = env->FindClass("android/provider/Settings$Secure");
              if (secure_class) {
                  jstring android_id_string = env->NewStringUTF("android_id");
                  jmethodID get_string_method = env->GetStaticMethodID(secure_class, "getString", "(Landroid/content/ContentResolver;Ljava/lang/String;)Ljava/lang/String;");
                  jstring android_id_obj = (jstring) env->CallStaticObjectMethod(secure_class, get_string_method, content_resolver, android_id_string);
                  env->DeleteLocalRef(android_id_string);
                  if (android_id_obj) {
                      const char* android_id = env->GetStringUTFChars(android_id_obj, NULL);
                      dmStrlCpy(info->m_DeviceIdentifier, android_id, sizeof(info->m_DeviceIdentifier));
                      env->ReleaseStringUTFChars(android_id_obj, android_id);
                  }
              } else {
                  dmLogWarning("Unable to get 'android.id'. Is permission android.permission.READ_PHONE_STATE set?")
              }
          }

britzl · June 28, 2022, 5:54am

I haven’t heard of this before and I’m not entirely sure of its meaning.

“We detected user data transmitted off device that you have not disclosed in your app’s Data safety section as data user collected.”

The three extensions you have do not transmit any data and Defold itself surely does not. It is true that we get the device id to populate one of the sys.get_sys_info() fields, but the data is not transmitted anywhere…

You should be able to complete/update the Data safety form for your app to get rid of the warning though:

d954mas · June 28, 2022, 6:43am

Yes I can complete data safety and set that I collected android_id.

But it is strange behavior. I do not collected anything(

Mathias_Westerdahl · June 28, 2022, 6:50am

It would be great if they mentioned which data, and also how they detected that.
In theory you could collect a lot of data and encrypt it and send it over http, and how would they know?
Is it perhaps the fact that the android id was collected at all?

d954mas · June 28, 2022, 6:55am

Yes, but that all information that i get(
It is some id

d954mas · June 28, 2022, 6:59am

britzl · June 28, 2022, 8:43am

It probably is. I don’t think Google will know what happens with the value after it is retrieved. I think they only check if we have code to get it or not.

AGulev · June 28, 2022, 8:46am

Maybe then this method should be in a separate extension as we did before with advertisement info?

Mathias_Westerdahl · June 28, 2022, 9:14am

If so, I think it perhaps should.

d954mas · June 30, 2022, 12:43pm

For now, i fill in data safety policy that device_id is collected.
It solved a problem.

But if you try to fix that issue it will be cool:)

britzl · June 30, 2022, 1:12pm

I’m concerned that this is a breaking change. If we decide to move it to an extension then maybe we should still keep the device_id field around in sys.get_sys_info() and replace it with an UUID generated from a MAC address (and maybe emit a warning or something).

Could you please create a ticket on GitHub?

d954mas · June 30, 2022, 8:05pm

github.com/defold/defold

Google Play (Issue found: Invalid Data safety section)

opened 08:05PM - 30 Jun 22 UTC

d954mas

bug

**Describe the bug (REQUIRED)** https://forum.defold.com/t/google-play-issue-fo…und-invalid-data-safety-section/71172 I’m updating my app in Play Market. And get warning from google SPLIT_BUNDLE 1: Policy Declaration - Data Safety Section: Device Or Other IDs Data Type - Device Or Other IDs (some common examples may include Advertising ID, Android ID, IMEI, BSSID) **To Reproduce (REQUIRED)** 1. Build aab. 2. Upload it to play market 3. Wait for review(~1-2h) I upload my game to “Open testing” and after review(1-2 hours) get email from google. **Expected behavior (REQUIRED)** No warning from google about device_id **Defold version (REQUIRED):** 1)Defold 1.3.3 2)permissions ``` <uses-permission android:name="android.permission.WAKE_LOCK" /> ``` 3)Dependencies ``` dependencies#0 = https://github.com/AGulev/jstodef/archive/1.3.0.zip dependencies#1 = https://github.com/DanEngelbrecht/LuaScriptInstance/archive/master.zip dependencies#2 = https://github.com/d954mas/defold-box2d/archive/refs/ ``` **Platforms (REQUIRED):** - Platforms: Android **Workaround (OPTIONAL):** https://stackoverflow.com/questions/71199143/action-required-your-app-is-not-compliant-with-google-play-policies-what-is-t/71234298#71234298 Fill in data safety policy that device_id is collected. **Screenshots (OPTIONAL):** ![2022-06-27_15-12-19](https://user-images.githubusercontent.com/2655263/176767692-afefb037-ab39-4c43-946d-2ce1c6c90cdf.png) **More info** It mb because engine always try to get android_id https://github.com/defold/defold/blob/6b03d6f75afb1411f62d96850cd8d94b1971916e/engine/dlib/src/dlib/sys.cpp#L754