Huge privacy concern: Ability to disable Corona Analytics

Solar2D Daily Builds and Public Releases
#1

Hi!

Since the release of Launchpad, it seems like Corona automatically connects to http://stats.anscamobile.com/analytics.php upon App Launch, and uploads some basic info about the user and session.

To my users, who are mainly parents with young children, this is a huge privacy concern. They, as well as me as a developer, expect an app without any analytics or usage logging.

I know that the information is pretty harmless, but this is not necessarily the issue here - the fact that info IS logged, not WHICH info. As a developer, I need to be able to guarantee that my apps don’t send any more information about the user than specified (in my case - ZERO logging). As soon as I noticed this, I wanted to disable this.

However, I seem to be out of luck.

I have tried disabling LaunchPad according to these instructions - http://developer.anscamobile.com/content/configuring-projects#Launchpad

(I used it EXACTLY as specified, on an empty project to make sure that no other code was reactivating it)

But I can still catch traffic to stats.anscamobile.com using a network monitor…! It seems to have a life on its own!

I tried building with an earlier version of Corona, to sidestep the whole analytics system, but it failed in the compiling stage (probably because I use Mac Os X Lion).

So - it seems like I have no choice but to accept the fact that Corona, unbeknownst to me and my users, wants to “call home” with information.

This is a very important issue, not only to us but our users. To not be able to control this seems pretty risky and is a big concern.

I have all the trust in the world for Ansca and I appreciate the initiative with LaunchPad, but for those of use that are not interested in using it, and with customers that really value their privacy, this needs to be adressed.

I was not even notified that this information was automatically being sent, which is one thing - but not being able to disable it seems like a HUGE issue that needs to be seen to immediately.

What are the options here for us developers? I, in the sincerest tone possible, urge Ansca to implement a deactivation feature as quickly as possible. I cannot be the only one who considers this a big privacy concern.

Thanks
[import]uid: 13935 topic_id: 15398 reply_id: 315398[/import]

#2

I will make sure to look into this asap.

You should be able to turn it off.

Now if you are using ads, (inMobi) you will *NOT* be able to turn off the feature. Or papaya for that matter. You will *not* be able to turn it off even if you override it in the config file.

Thanks

Carlos

c. [import]uid: 24 topic_id: 15398 reply_id: 56945[/import]

#3

That’s got me very curious - how did you happen to notice? On App Launch how can you tell it’s logging (as a developer and user)? [import]uid: 40033 topic_id: 15398 reply_id: 56949[/import]

#4

Here is the corrected code in the config.lua file:

application =  
{  
 launchPad = false,  
}

I verified (using Wireshark) that the above does disable any stats from being set to the Ansca servers. Note: Setting “require credits”, “require gameNetwork”, or “require ads” in your code will enable LaunchPad and override this setting.

Sorry for the confusion and I hope this helps.

-Tom

Update: The doc page has been updated with the correct syntax. [import]uid: 7559 topic_id: 15398 reply_id: 56975[/import]

#5

Turns out that the docs were wrong. Tom updated them, we verified the new documentation and parameters work and no data is being passed to us anymore with the new config.lua settings as described by Tom in the entry above. Docs should be updated shortly.

Thank you for informing us.

Carlos. [import]uid: 24 topic_id: 15398 reply_id: 56976[/import]

#6

Thanks for the quick reply and the professional and fast handling of this case!

I will do some testing as soon as I can, but I have full confidence that the above corrected code will solve the problem!

fava: Use a http monitor like www.charlesproxy.com - you can route your iphone traffic through it through some tinkering, but the most simple way to at least try it is to start it on your Mac and then run an app the iOS Simulator to see what your compiled apps are up to.

Edit: And after a test in the simulator, no external server is being talked to! Perfect! Again, thanks for the quick response! [import]uid: 13935 topic_id: 15398 reply_id: 57047[/import]

#7

Hey MJB,

What version of Corona are you currently building with? And just to confirm, you are not using gamenetwork, ads or credits?

Peach :slight_smile: [import]uid: 52491 topic_id: 15398 reply_id: 65891[/import]

#8

Hey Mark,

Thanks for sharing the config.lua file.

PS: Do you really need to setup the “launchPad = false” 2 times into the config?

Regards,
[import]uid: 89165 topic_id: 15398 reply_id: 65999[/import]

#9

I’m sure the second “launchpad = false” was left over from when our documents incorrectly said it should be in the “Content” section and the “P” was lowercase. The first “launchPad = false” in the main section of the config.lua file is the correct one. [import]uid: 7559 topic_id: 15398 reply_id: 66002[/import]

#10

RSCdev, Tom: Woops, my bad - I guess I forgot to remove it! The first one is the one you need.

MJB: Again, try changing “launchpad = false” to “launch P ad = false”. The variable is probably case sensitive, so make sure the P is uppercase. I think that might do the trick…! [import]uid: 13935 topic_id: 15398 reply_id: 66010[/import]

#11

Just pitching in some ideas from my totally unofficial end here:

Maybe it’s case sensitive; are you sure you have “launchPad”, and not “launchpad” or “Launcpad” etc. “launchPad” is the correct one.

Also, “launchPad = false” issupposed to be placed in config.lua, and not build.settings.

If you made the change on an app that was already live, perhaps people are still using an older version that submits data? Have you used www.charlesproxy.com to see if the latest version actually connects to the analytics server?

This is what my config.lua file looks like, and everything appears to working (i.e. no analytics) for me.

-- config.lua  
  
application =  
{   
 launchPad = false,  
  
 content =  
 {  
 width = 768,  
 height = 1024,  
 scale = "zoomStretch",  
 antialias = true,  
  
 imageSuffix =  
 {  
 ["@2"] = 2,  
  
 },  
  
 },  
}

Edit: Removed a second instance of the launchPad in the code above, as I had forgotten to remove it before (see conversation below) [import]uid: 13935 topic_id: 15398 reply_id: 65963[/import]

#12

Thank you Mark. I will give it a try. That’s got to be it!
[import]uid: 82085 topic_id: 15398 reply_id: 66019[/import]

#13

Yes, the code is case sensitive. You need to use “launchPad = false” in order for it to work. [import]uid: 7559 topic_id: 15398 reply_id: 66024[/import]

#14

Thank you Tom and Mark for the explanation.

So to summarize:

"launchPad = false" in the main section (not inside “content” of the config.lua file is the correct one.
Regards,
Rodrigo. [import]uid: 89165 topic_id: 15398 reply_id: 66027[/import]

#15

Is there a way of removing an app from the launchPad that was built but never acually made it to any of the market places?

I had some intersting builds to try to get the apple store to accept one of my apps. I had mentioned ipod and iphone in my sku number and could not change it.

The duds are there with no activity.

I would like to be able to delete them if possible.

Ed [import]uid: 8102 topic_id: 15398 reply_id: 66029[/import]

#16

Hey, Ed, MBXGames brought up the same topic (about deleting unwanted items from Analytics section of the launchPad) here:

http://developer.anscamobile.com/forum/2011/11/07/remove-item-launchpad-analytics

If enough users request this, maybe Ansca staff would juggle priorities a bit and allocate their precious resources to implement a feature that enable users to remove unwanted items from Analytics section. (But, in my opinion, this isn’t a show stopper nor a super critical issue that need immediate attention. It’s good to have, but only if it doesn’t slow down other, more urgent areas of development, such as getting the next version of stable build released, for example.)

Naomi [import]uid: 67217 topic_id: 15398 reply_id: 66053[/import]

#17

that feature is known and our head of IT is back in town after a well deserved R&R so give him a few days to settle back in …

c
[import]uid: 24 topic_id: 15398 reply_id: 66056[/import]

#18

Carlos,

Thank You, I’d like to get the dead wood out of the listing.

Have a Great week,
Ed [import]uid: 8102 topic_id: 15398 reply_id: 66065[/import]

#19

x [import]uid: 82085 topic_id: 15398 reply_id: 65958[/import]

#20

x [import]uid: 82085 topic_id: 15398 reply_id: 66006[/import]