Subway Surfers and Other Mobile Games Use Sneaky Ways to Collect Personal Data in Post-IDFA World

Mobile game developers are increasingly utilizing technical data collection methods to circumvent Apple’s App Tracking Transparency (ATT) framework, effectively undermining user privacy choices in the post-IDFA era. The investigation highlights that despite users opting out of tracking, certain mobile applications continue to harvest device-specific information to facilitate targeted advertising and digital fingerprinting.

The analysis identifies specific titles, including Subway Surfers, Streamer Life!, and Run Rich 3D, which transmit granular device data to the ad network Chartboost. This data includes battery levels, internet addresses, free storage capacity, display settings, time zones, currency, country, and the time of the last device restart. By aggregating these technical parameters, developers can create unique profiles to identify and track users, rendering the "Ask App Not To Track" feature largely ineffective and providing users with a false sense of privacy.

While developers such as Sybo, the creator of Subway Surfers, maintain that collected data is necessary for core game functionality, the practice raises significant concerns regarding the efficacy of Apple’s privacy policies introduced in April 2021. Industry experts note that while digital fingerprinting may not always accurately attribute specific ad clicks, it remains a persistent workaround for publishers seeking to maintain advertising revenue in an environment where traditional identifier-based tracking is restricted. This trend underscores a broader industry shift where mobile publishers are actively seeking alternative methods to sustain engagement and monetization strategies following the implementation of stricter iOS privacy regulations.