The General Data Protection Regulation (GDPR) is a European Union law regulating the data privacy of EU citizens.
For more information about EU GDPR, see https://www.eugdpr.org
For information about Unity and GDPR, see https://unity3d.com/legal/gdpr
For Unity’s own privacy policy, see https://unity3d.com/legal/privacy-policy
Maintaining compliance with GDPR when you use Unity Analytics is a shared responsibility. Unity collects data to help you improve the player experience with ads and gameplay. Some of that data includes personally identifiable information (PII) regulated under GDPR. Unity provides the tools to allow a player to opt out of the PII collection, and to manage the personal data that Unity collects about them, as required by the GDPR. Your responsibilities include adding an opt-out button to your ads, and providing a link to Unity’s privacy policy from your own privacy policy.
When your app uses use Unity Ads, Unity displays a notice to the player the first time an ad is shown on their phone, giving them the option to opt in or out of personally identifiable information collection. Subsequent ads also display a button that users can use to manage their data privacy options. For more information about GDPR and the Unity Ads SDK, see Unity Ads Knowledge Base: GDPR Compliance.
If you use both Unity Ads and Analytics, the Unity Ads opt-out mechanism applies to both services.
If you do not use Unity Ads, but do use other Unity services, such as Unity Analytics, IAP, Multiplayer, or Performance Reporting, then you must use the Unity Analytics Data Privacy plug-in to provide an opt-out choice to your players. The plug-in provides a button you can add to your game that opens a Unity web page where players can manage their privacy settings. Players manage their preferences on a per-game, per-device basis. Unity Analytics does not track whether the same player plays more than one game made with Unity, or plays the same game on multiple devices.
The above options cover any data collected by Unity for customizing Ads and player services. However, if you collect personally identifiable information data on your own, you are responsible for protecting and managing that data.
Best practices:
Solicit your own legal advice. Nothing in this document should be construed as legal advice.
Read and understand the Data Processing Addendum (DPA) [PDF]
List Unity as a third-party which collects data in your privacy policy, and include a link to Unity’s privacy policy in your privacy policy.
Do not send personally identifiable information to Unity Analytics in Standard or Custom Events.
Do not use the Analytics.SetUserGender() or Analytics.SetUserBirthYear() to send gender and age information to Unity Analytics. These APIs are deprecated.
You can obtain the Unity Analytics Data Privacy plug-in from the Unity Asset Store. The plug-in is available for Unity versions:
The plug-in does not support the following platforms:
The Unity Analytics service now deletes personally identifiable information sent from games running on those platforms automatically. Contact DPO@unity3d.com if you have questions.
If your game displays ads from the Unity Ad network, the Unity Ads SDK already displays a data collection opt-out choice to the player, and configures Unity Analytics based on the player’s data privacy choice. You only need to use the Unity Analytics Data Privacy plug-in when you do not use the Unity Ads service.
If you do not use Unity Ads, then you can integrate the Unity Analytics Data Privacy plug-in, which gives your players control over Unity Analytics data collection.
To integrate the plug-in:
Import the Unity Analytics Data Privacy Asset package into your Project.
Provide an opt-out choice to the player using a button or other UI control.
The Unity Analytics Data Privacy plug-in contains code that automatically queries the Unity Analytics Service to determine the opt-out status of the current player. The plug-in then configures Unity Analytics based on the player’s preferences. The plug-in also includes a Unity UI button prefab. This button opens a player’s personal data privacy page where they can opt-out of Unity’s data collection and view the data that Unity has collected in the past.
Important: If a player has a browser pop-up blocker enabled, their browser can prevent the data privacy page from opening. Some browsers note that a page has been blocked, but others provide no notice at all. Consider adding a message in your user interface that warns players that a pop-up blocker might prevent the page from opening.
See Unity Analytics DataPrivacy API for more information.
To import the plug-in into your project:
Go to the Unity Analytics Data Privacy plug-in page on the Unity Asset Store.
Click the Add to My Assets button on the page.
In your Unity project, open the Asset Store window (menu: Window > General > Asset Store).
Click the Downloads icon at the top of the window.
Select My Purchased.
Click the Download button for the Unity Analytics Data Opt-Out Plug-in.
On the Import Unity Package window, click Import.
The plug-in includes a Unity UI button prefab. When a player clicks this button, the Player Data Privacy page opens in a web browser. You can also provide your own user interface and open the Data Privacy page manually.
Method 1: Using Unity UI
Import the Asset package into your project.
If you are building your project with Unity 5.1 or earlier, you must call DataPrivacy.Initialize(). Newer versions of Unity call Initialize() call automatically.
If you do not already have a Canvas GameObject in the Scene, add one. Unity automatically adds an EventSystem when you add the Canvas.
Drag the DataPrivacyButton prefab to the Canvas GameObject in the Scene. Find the prefab in the Project window, in the DataPrivacy/Runtime folder.
Adjust the position, graphics, and text of the button to suit.
The button is already connected to the Data Privacy API, so that it opens the player’s personal data management page when the player clicks it. The page opens in a web browser.
Method 2: Using you own UI
To use your own user interface for the button, you can request the URL of the user’s data opt-out page and then open that URL in a browser or web view:
Import the Asset package into your project.
Create your own UI control that informs the player of their ability to opt-out of data collection.
Note: The Data Privacy plug-in includes an icon in the DataPrivacy/Runtime folder. Unity encourages you to use this icon on your data privacy button (or similar control) to provide a consistent graphical cue to players encountering data privacy controls in Unity games.
If you are building your project with Unity 5.1 or earlier, you must call DataPrivacy.Initialize(). Newer versions of Unity call Initialize() automatically.
In response to the player’s click or interaction with this control, call the DataPrivacy.FetchPrivacyUrl() function. This function takes an Action<string> object that invokes when the network request completes. You can optionally pass in a second Action<string> function to handle the failure case.
In your handler for the FetchPrivacyUrl() request, use Application.OpenURL() to open the URL received in a browser.
For example, the following script opens the Player Data Privacy page in response to a click on a GameObject:
using System;
using UnityEngine;
using UnityEngine.Analytics;
public class OptOutHandler : MonoBehaviour {
static void OnFailure(string reason)
{
Debug.LogWarning(String.Format("Failed to get data privacy page URL: {0}", reason));
}
void OnURLReceived(string url)
{
Application.OpenURL(url);
}
public void OpenDataURL()
{
DataPrivacy.FetchPrivacyUrl(OnURLReceived, OnFailure);
}
void OnMouseOver(){
if(Input.GetMouseButtonDown(0)){
OpenDataURL();
}
}
}
Before Unity 5.2, Unity provided Analytics support through a Unity Asset Store asset package. You can use the Data Privacy plug-in with these older versions of Unity Analytics, but you must initialize the privacy plug-in before calling any of its other functions (and before your players have a chance to click the data privacy button). The best place to initialize the plug-in is right after you call UnityAnalytics.StartSDK() to initialize the Analytics plug-in:
using UnityEngine;
using UnityEngine.Cloud.Analytics;
using UnityEngine.Analytics;
public class UnityAnalyticsIntegration : MonoBehaviour {
void Start () {
const string projectId = "SAMPLE-UNITY-PROJECT-ID";
UnityAnalytics.StartSDK (projectId);
DataPrivacy.Initialize ();
}
}
Note: Unity 5.2 and later versions call DataPrivacy.Initialize() automatically. You do not need to call the function yourself unless you are using the Asset Store package for Analytics support.
See Unity Analytics DataPrivacy API for more information.