googleads / googleads-consent-sdk-android

Consent SDK
https://developers.google.com/admob/android/eu-consent
Apache License 2.0
100 stars 82 forks source link

Question: Is it ok to prevent the user from using the app if consent is not given? #97

Closed cmacdonnacha closed 4 years ago

cmacdonnacha commented 5 years ago

Hi,

I was wondering if it's ok prevent the user from using the app if consent is not given? Under GDPR you cannot punish the user for not giving consent, however, needing ad revenue surely comes under "legitimate interest".

lpbas commented 4 years ago

Well, if you want to degrade the app experience and lose a lot of users, then I guess it's ok.

But when they don't give consent, you don't have to disable ads, you have to disable personalised ads. Thus you still make ad revenue, but a little bit less, since the users are less likely to click on ads that are not aligned with their interests.

cmacdonnacha commented 4 years ago

I'm afraid that's actually incorrect as non-personalized ads still use cookies (specifically an advertising id) so the user still needs to consent before you can display any ads.

See https://support.google.com/admob/answer/7676680?hl=en

Although non-personalized ads don’t use cookies or mobile ad identifiers for ad targeting, they do still use cookies or mobile ad identifiers for frequency capping, aggregated ad reporting, and to combat fraud and abuse. Therefore, you must obtain consent to use cookies or mobile ad identifiers for those purposes where legally required, per the ePrivacy Directive in certain EEA countries.

lpbas commented 4 years ago

Hmmmm, maybe someone form google can step in and give us a response, since you seem to be right.

rareserban commented 4 years ago

Nope, if it is a ad supported app, it should be mentioned in Therms of use. Data collection and such in Privacy policy. The GDPR is in respect to targeted ads, not to ads in general.

cmacdonnacha commented 4 years ago

@rareserban Thanks. Can you reference to where that is in the official documentation? GDPR is in terms of any PPI (Personal Identifiable Information), and an advertising id is PPI.

rareserban commented 4 years ago

@rareserban Thanks. Can you reference to where that is in the official documentation? GDPR is in terms of any PPI (Personal Identifiable Information), and an advertising id is PPI.

My understanding>>>

Reference: https://developers.google.com/admob/android/eu-consent

"Under the Google EU User Consent Policy, you must make certain disclosures to your users in the European Economic Area (EEA) and obtain their consent to use cookies or other local storage, where legally required, and to use personal data (such as AdID) to serve ads."

Cookies wise: https://support.google.com/admob/answer/7676680

And this is why the consent form offers you those options: non pers/pers/ads free and one CANNOT skip this.

Now, your Therms of use defines the conditions that apply to users if they what to use the app. And under Privacy policy there should be mention to cookies and such. If you reference AdMob it is included though.

cmacdonnacha commented 4 years ago

Hmm, still not clear that non personalized ads do not require consent. Thanks anyway. I'd be interested for an official answer from a member of the Google team.

rareserban commented 4 years ago

It does require. You mention in in terms and get it with the form. Otherwise the user is free not to use the app. Or get the paid one, if any.

cmacdonnacha commented 4 years ago

Ok, as @L4grange mentioned the user may not be happy to not be able to use the app if they don't consent or have to pay for it but at the end of the day we have to make money from our efforts.

And just to be clear after all that, am I correct in saying we cannot show non-personalized unless the user has given consent? You seem to be contraindicating yourself a bit so just want a clear answer.

lpbas commented 4 years ago

So, if I'm understanding correctly, what @rareserban is saying is that the users must agree to the TOS in order to use the app (which includes that AdMob uses cookies in order to serve ads), and then, if they give consent, we can show personalised ads, otherwise non-personalised, and we are covered by the app's TOS for the AdMob cookies.

cmacdonnacha commented 4 years ago

@L4grange Sounds good to me. So if they don't accept terms and conditions we shouldn't allow them to proceed to use the app correct?

I'm interested in your opinion because above you said:

Well, if you want to degrade the app experience and lose a lot of users, then I guess it's ok.

GuanacoDevs commented 4 years ago

I have a video here where you can see how I manage the consent permission.

This procedure is only related with their ads preference, therefore I don't have them accepting a PP nor a TOS but there are links that will explain them with more detail to the PP and/or TOS

Once they have chosen one over the other, they still have the chance to change the ads source whiting the app or get the ads free version(0:29) ADS SETTINGS/VIP in the menu.

And finally I built my own consent form, not using the one from the SDK.

cmacdonnacha commented 4 years ago

@GuanacoDevs do you think not allowing them to use the app will result in negative user experience and uninstalls?

GuanacoDevs commented 4 years ago

@cmacdonnacha look, the reality is that nobody likes ads, I don't like ads. But my best selling app <60 sales in 2 years never had a complaint with the featured ads. If you are afraid to give a bad user experience don't use ads. But you know the amount of time you have invested, maybe you won't get rich from ads, Android is famous for not having buyers like iOS. In your position I'll put the ads if somebody complains, just rethink the placing, the frequency, I bet you invested a bit of time and maybe money, forget about what people may think unless it's constructive.

Your are the only one that knows what's best for you.

cmacdonnacha commented 4 years ago

Thanks @GuanacoDevs