Android APK Permissions troubles

[Dobermann]

I'm using the "get_accounts" permission to recover the user google account, and when looking to the permissions my game needs, the google play descriptions says:

Identity
find accounts on the device
Contacts
find accounts on the device

https://play.google.com/store/apps/d....spartanrunner

I only use "internet" and "get_accounts" permissions, some users ask me why i need access to their contacts and as i absolutly don't need access to that i would like to know how to get access to the user google account only. Thank you.

[Fernando]

there are only two way:

this one using the information from devices
or using GPG objects and get email from authenticated user.

and yes the you need to get accounts permission to retrieve this information using android object


please it is important now to make a privacy policy and let your user know why you are requesting or using such permission


https://termsfeed.com/blog/android-p...rivacy-policy/

[Dobermann]

Yes i've done this file, not really complete, but it is here, i'll add a line about this.
By the way, i don't store emails, they are transformed into a secure key that even myself can't reverse to the real email address. I encrypt them with AES then transform it with MD5 before any communication to my server where i answer an unique ID for my user, then only this ID is used for all the live services my game provide. The google account is needed only when running the game for the first time or reinstalling it.

So even with GPG object i'll need to ask for this permission? I don't see that permission on other games so i'm wondering how they deal with it.

[Fernando]

point me to a one of these games that read the email without this permission and without gpg for me to check

[Dobermann]

point me to a one of these games that read the email without this permission and without gpg for me to check

They use GPG, like Clash of Clan, etc...

[Fernando]

oh yes use GPG, that the way google prefer.

just to make a comment, android code/mode/things are always in change, obtaining the email from device was coded in android object an was the only before google play services started, those are back version 1.4, after they made the change to dangerous permissions a non dangerous permission and the must to ask user to allow the use of them in android version 6, thing move faster to Goggle play services.

[Dobermann]

I'll try to use GPG then