Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable User Analytics #38

Open
TheYellowArchitect opened this issue Aug 11, 2022 · 2 comments
Open

Disable User Analytics #38

TheYellowArchitect opened this issue Aug 11, 2022 · 2 comments
Labels
privacy Anything related to data generated by the user unity engine Anything related to Unity Engine itself

Comments

@TheYellowArchitect
Copy link
Owner

TheYellowArchitect commented Aug 11, 2022

All builds by default have "editor analytics" which "help the developer understand the player flow" blabla
Obviously, this contains privacy-sensitive data, like when you opened the game.
I do not know where these packets are uploaded, could be some Google server, and that's shady.
Every Unity game does this!

Anyhow, greedy Unity has done the following: If you have free edition, you cannot disable user analytics. So, if you want to ensure user privacy, you are blackmailed.

But since Unity is full of bugs, even this is bugged!
Ironic. Even if I bought "Pro" edition, I cannot disable it.

And if I upgrade to future versions of Unity, where this "bug" is fixed, not only I get new bugs, but many features of Double Damnation will be deprecated/obsolete... UNABLE TO COMPILE.

Source for the above claims:
https://forum.unity.com/threads/completely-disabling-analytics-at-runtime.520827/#post-3557207

@TheYellowArchitect TheYellowArchitect added unity engine Anything related to Unity Engine itself privacy Anything related to data generated by the user labels Aug 11, 2022
@TheYellowArchitect
Copy link
Owner Author

TheYellowArchitect commented Aug 11, 2022

As I am inexperienced with wireshark, I would like to request someone to decrypt these packets, and confirm what data of the user is uploaded (fingerprint? or even more?)

(inb4 requesting how to disable uploading user analytics via hexcode on final build)

Anyway, adding "more-info" tag, as it is confirmed user analytics sends data to shady servers (unknown IPs), and also unknown what kind of data it uploads.

@TheYellowArchitect TheYellowArchitect added the needs more info Lacking enough information label Aug 11, 2022
@TheYellowArchitect
Copy link
Owner Author

TheYellowArchitect commented Aug 26, 2022

As I am inexperienced with wireshark, I would like to request someone to decrypt these packets, and confirm what data of the user is uploaded (fingerprint? or even more?)

A based user who specializes on privacy, pretty much provided me all the info Unity gets from its builds

Device Fingerprint (on boot)

os_ver: operating system incl. architecture e.g. 32 or 64Bit model used
mainboarddevice_name: device name of the user (entered by the operating system during installation)
cpu: e.g. Intel Core I7 xxx GHz
cpu_count: how many cores
cpu_freq: clock frequency
ram: Ram
vram: Vram
screen: used resolution
dpi: DPI
lang: Language
sensors: Sensor
infogfx_name: Used graphics card
gfx_vendor: Manufacturer
gfx_ver: DirectX version
gfx_driver: Graphics driver
userID: User tracking during the whole game session
sessionID: used for tracking players within sessions

Standard Request/Response

https://config.uca.cloud.unity3d.com/
{
"common" : 
    {
    "appid" : "local.4d7e864dc1e52d347897bc8eb58d4e1e", 
    "build_guid" : "2696897992176624e9deeaf5fb2bf472",
    "deviceid" : "xxxxxx", 
    "localprojectid" : "4d7e864dc1e52d347897bc8eb58d4e1e", 
    "platform" : "WindowsPlayer",
    "platformid" : 2,
    "sdk_ver" : "u2018.4.4f1",
    "session_count" : 1,
    "sessionid" : 3208018618660299749,
    "t_since_start" : 7866641,
    "userid" : "xxxxxx"
    }
}

{   "analytics" : 
   { "enabled" : true },
   "connect" : 
       { "enabled" : true,
       "limit_user_tracking" : false,
       "player_opted_out" : false
       },
    "performance" : 
       { "enabled" : true },   "prefs" : {}
}

Event-Tracking

https://cdp.cloud.unity3d.com/v1/events which lead to related hostnames with endpoints (Google GCE)
http://config.uca.cloud.unity3d.com
http://cdp.cloud.unity3d.com
http://remote-config-prd.uca.cloud.unity3d.com
http://thind-gke-euw.prd.data.corp.unity3d.com

Europe

http://thind-gke-usc.prd.data.corp.unity3d.com

US

http://thind-gke-ape.prd.data.corp.unity3d.com

Asia

http://53.26.241.35.bc.googleusercontent.com
http://186.194.186.35.bc.googleusercontent.com
http://234.88.190.35.bc.googleusercontent.com
http://229.52.241.35.bc.googleusercontent.com
http://150.252.227.35.bc.googleusercontent.com

@TheYellowArchitect TheYellowArchitect removed the needs more info Lacking enough information label Aug 26, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
privacy Anything related to data generated by the user unity engine Anything related to Unity Engine itself
Projects
None yet
Development

No branches or pull requests

1 participant