android – Firebase分析和同意对话框

我在Play商店中有一个简单的应用程序,它无法访问用户的个人信息(仅使用蓝牙和网络).

我一直在考虑使用Firebase分析来获取人们使用应用程序的方式以及我可以改进的地方.但是,我在理解所涉及的所有法律义务方面存在严重问题.根据我的收集,我需要一个隐私政策,这不是问题.但从我所看到的Firebase Analytics Policy,我需要遵守European Union User Consent Policy.

因此,据我所知,应用程序需要显示某种形式的对话框,用户同意或不同意数据收集.问题是,我担心大多数人会拒绝,这是对的.但我问我是否真的需要这样做,因为我不认为我曾经见过一个应用程序问我这种协议(虽然我可以看到很多网站都这样做).

解决方法:

即使Google没有为需要做的事情提供确切答案,他们也会在Firebase条款和欧盟用户同意政策页面中提供大量指导.

You are required to notify your App Users by disclosing the following
information:

• The Google Analytics for Firebase features you have implemented.
• How you and third-party vendors use first-party cookies, or other first-party identifiers, and third-party cookies and similar
  technologies, such as identifiers for mobile devices (including
  Android Advertising ID and Advertising Identifier for iOS), or other
  third-party identifiers, together.
• How App Users can opt-out of the Google Analytics for Firebase features you use, including through applicable device settings, such
  as the device advertising settings for mobile apps, or any other
  available means.

– &GT最重要的是不要忘记选择退出.

For end users in the European Union:

• You must use commercially reasonable efforts to disclose clearly, and obtain consent to, any data collection, sharing and usage that
  takes place on any site, app, email publication or other property as a
  consequence of your use of Google products; and
• You must use commercially reasonable efforts to ensure that an end user is provided with clear and comprehensive information about, and
  consents to, the storing and accessing of cookies or other information
  on the end user’s device where such activity occurs in connection with
  a product to which this policy applies.

&安培;

If the EU user consent policy applies to your website or app, two of
the key things to consider are:

• Do you have a means of obtaining consent from your end users? If not, you’ll need one.
• What message should you present to your users to get consent?

– &GT获得同意

现在,Google甚至提供了一些基础知识,说明应用程序中的消息可能如何,以及通知代码如何工作：

We use device identifiers to personalise content and ads, to provide
social media features and to analyse our traffic. We also share such
identifiers and other information from your device with our social
media, advertising and analytics partners who may combine it with
other information you’ve provided to them or they’ve collected from
your use of their services. See details OK

// This code works on Android API level 1 (Android 1.0) and up.
// Tested on the latest (at the moment) API level 19 (Android 4.4 KitKat).
// In the main activity of your app:

public class MainActivity extends Activity {

  (...)

  @Override
  public void onStart() {
    super.onStart();
    final SharedPreferences settings =
        getSharedPreferences("localPreferences", MODE_PRIVATE);
    if (settings.getBoolean("isFirstRun", true)) {
      new AlertDialog.Builder(this)
        .setTitle("Cookies")
        .setMessage("Your message for visitors here")
        .setNeutralButton("Close message", new OnClickListener() {
          @Override
          public void onClick(DialogInterface dialog, int which) {
            settings.edit().putBoolean("isFirstRun", false).commit();
          }
        }).show();
    }
  }
}

谈到法律理论,这就是欧洲隐私智库在“关于智能设备上的应用程序的意见02/2013”​​中所说的 [WP29].简而言之,它是

“important to note the distinction between the consent required to
place any information on and read information from the device, and the
consent necessary to have a legal ground for the processing of
different types of personal data. Though both consent requirements are
simultaneously applicable, each based on a different legal basis, they
are both subject to the conditions of having to be free, specific and
informed (as defined in Article 2(h) of the Data Protection
Directive). Therefore, the two types of consent can be merged in
practice, either during installation or before the app starts to
collect personal data from the device, provided that the user is made
unambiguously aware of what he is consenting to”

这并非不可能,但由于我每天都在iubenda处理这些话题(我们最近已经完成了all integrations regarding Firebase),我知道一开始看起来可能看起来很难.

以下是一些经验法则：

>确保通知应用程序,Play商店以及营销网站上的隐私惯例
>在通知被接受之前,需要阻止破坏性标识符,需要指出退出

附：下次你可能想在StackExchange网络上询问Law或UI,因为这只与编程部分有关.如果您对此感兴趣,您可能希望follow iubenda along on our journey让像您和我这样的开发人员更轻松地完成这些任务:)

标签：android,firebase,firebase-analytics,privacy,privacy-policy
来源： https://codeday.me/bug/20190608/1196197.html