arXiv:2610.39730 · v1
Investigating Data Flows from Android Games
摘要
Online applications can share data with arbitrary parties, without users noticing. In practice, these data flows could constitute privacy violations to individual users, with the lack of transparency leaving users unaware of the unwanted data flows. To understand the spread and scale of this privacy threat, we investigate what data is collected and where it is sent in popular free-to-play Android games. As part of our investigation, we conduct a measurement study where we collect and analyze over 16 GB of network traffic from 50 puzzle games. Additionally, we explore the effectiveness of user-side countermeasures for a selection of the apps. We find that while most countermeasures, such as ad-blocking DNS services, decrease data flows, withholding consent and opting out of data collection can produce inconsistent behavior including increased outgoing traffic. To encourage further analysis, we release our measurements as an open dataset.
作者备注：Long version (including appendix) of paper accepted at Nordsec 2026. Accompanying dataset available at https://doi.org/10.7910/DVN/CAV2I2
期刊信息：Secure IT Systems: 31st Nordic Conference, NordSec 2026, Aarhus, November 11-12, 2026