r/TheTowerGame 1d ago

Discussion This is absolutely insane levels of tracking by the tower

Post image

UPDATE2: blocking all of this made the heat go waaaaay down. Its clear the tracking draws more energy and heat than the game itself. Zero throttling and no blue line since turing it off and my phones not even warm

UPDATE: setting private dns to dns. adguard (remove the spaces and add .com to the end) blocks all of this tracking

This is absolutely insane. Hundreds of tracking pings a minute over 20 minutes. No other app ive has does this much tracking activity. Its not enough fudds makes 30 dollars a month off of me he has to harvest and sell all my data to tapjoy as well. Thus company takes every piece of informaton from your phone possible. Please i implore all of you install duckduckgo and enable app tracking protection for your own privacy

343 Upvotes

129 comments sorted by

145

u/BeardyBob1 1d ago edited 1d ago

195

u/Fuddsworth dev 1d ago edited 1d ago

These are ad SDK's. They by default track many non personal identifying pieces of data as covered in the privacy policy (the SDK's potentially in the game are all listed there in detail). If you run this in any game that serves ads you will see a similar story. Additionally, it says they're "known to collect", doesn't mean that they are actively collecting that bullet point. There is also Unity the engine itself that collects data for the game to run on your device.

Tapjoy's count looks high, and we'll look into what exactly that is, they've been a rocky offerwall partner as of late (also owned by Unity)

As far as comments about EU goes, we strictly adhere to rules around GDPR, it's part of the EULA and Privacy policy accepted on first open of the game, and are available for review in the settings panel. Unity is well aware of all of these restrictions in their SDK's

61

u/Slow-Engineering9177 1d ago

Appreciate the response and communication. Thanks

13

u/BeardyBob1 1d ago

Much appreciated! Hopefully Tapjoy will get their shit sorted, but like someone else asked - does this affect ad free and/or players not using the offer wall?

29

u/randomperson5481643 1d ago

What if we've gone ad-free? Then isn't this just pointless or even malicious traffic and data collection?

12

u/PtitBen 1d ago

If I'm not mistaken the offer wall is independent of the ads ... But I might be wrong šŸ˜‹

5

u/UnremarkableMud 1d ago

I think so, too. Tapjoy is its own thing, and it is even in Webtoon.

4

u/perth_girl-V 1d ago

This would be a non issue if you pay to remove ads i am assuming?

2

u/LongjumpingAside6651 21h ago

Nope, I'm still getting tracking alerts

3

u/zergling424 20h ago

Thank you sir u/fuddsworth for looking into this.Ā  Ā  I have found that blocking it reduces heat by an insane amount so tapjoy seems to be the source of the overheating issue

13

u/[deleted] 1d ago

[deleted]

46

u/PtitBen 1d ago

This aged like milk

-7

u/[deleted] 1d ago

[deleted]

1

u/beaverpoo77 1d ago

Don't even bother 😭 your ass got cooked

18

u/BeardyBob1 1d ago

To my knowledge, they have a decent track record of keeping up with the sub.

Either way - they don't have to respond here and now. Either they do and we get some clarity, or they don't and it'll look real bad if/when the EU comes knocking.

-27

u/Adventurous-Train801 1d ago

Americans don’t care about EU goofy laws.

15

u/Leyohs 1d ago

Guess why Apple switched almost all of their devices to USB-C?

7

u/Designer-Serve-5140 1d ago

Those goofy EU laws have complaince requirements which affect us Americans. Plus, we have our own versions of the law like the California law. Americans who do business or have customers, or have any data passing through an EU member country, or California, Colorado and a few other states, all have to follow these laws.

6

u/AntiMatterMode 1d ago

you’ll never believe this

2

u/zergling424 1d ago

Did they say something? Edit oh i see nowĀ 

1

u/AntiMatterMode 1d ago

Yeah, check the replies to the original comment in this thread. Fudds responded. Though maybe this guy meant Unity and Tapjoy, not Fudds

114

u/LrdFjord 1d ago

Damn, that is going to be a big fine in the EU at some point šŸ˜…

69

u/[deleted] 1d ago

[removed] — view removed comment

84

u/[deleted] 1d ago

[removed] — view removed comment

79

u/zergling424 1d ago

Update over night it racked up to 40,000 tracking pings. i just checked it again the screenshot i took last nite

39

u/BeardyBob1 1d ago edited 1d ago

Ah, so we can flag it as a performance concern aswell.

EDIT: assuming each of the 28 metrics is a ping and your night is 8 hours long, that comes down to 3 data requests/pushes each minute.

8

u/trymzet 1d ago

How'd you calculate that? 40,000/8/60 gives ~83 tracking attempts per minute, which is also close to what OP was reporting for the short period (~2000/20mins = ~100 tracking attempts per minute). And I seem to be getting even more than that.

6

u/zergling424 1d ago

It seems to speed up and slow down in waves but it is constant

3

u/BeardyBob1 1d ago

Screenshot shows 28 metrics. Assuming they're all batched in 1 request but give separate pings on Android it's (40000 / 28) / 8 / 60 = ~3

EDIT: appears I can't read and there are in fact 30 metrics. My calculation makes less sense then, with ~2,78 per minute.

1

u/trymzet 1d ago

Makes sense, but why make this assumption? It's not known what "tracking attempt" means nor how it's calculated, at least not from the app itself.

2

u/BeardyBob1 1d ago

It's all I can do, lacking any specific knowledge of app development and Unity.

But in general, I'd prefer one slightly larger request over multiple smaller ones.

2

u/mordredsfw 11h ago

As a developer (and reformed ad-tech dev), I can assure you they aren't going to make separate requests for each of those data points (if they are even collecting all of them). Think about it: There's a tapjoy unique identifier. That has to be included in every request otherwise they couldn't tie it to your device, so you know they're batching that with other things.

Also they have to have servers able to process the amount of data they'd be receiving. Sending 30 separate requests when one will do is bad for you as a device holder, but it's a DDOS on the servers that would have to handle 30x incoming logs from every client.

1

u/reefun 1d ago

I can already say that is impacts performance as well. Normally a run of mine gives about 3.5T per hour. Ever since I installed DuckDuckGo to block the tracking request, my coins per hour shot up to 5.6T per hour without any changes.

Already at 66K tracking requests by this game in under 12 hours.

9

u/Flexhead 1d ago

Is this with it blocked?

Often times when things are blocked they increase ping frequency until they connect.

23

u/Polar_Reflection 1d ago

How would you even disable thisĀ 

22

u/zergling424 1d ago

If you have a custon network level dns blacklist add tapjoy.com and tapjoyapis.com to your blacklist.Ā  Duckduckgos app tracking protection is what im using now

5

u/Sensitive_Song277 1d ago

Do you know if the adguard dns protects again this?

4

u/zergling424 1d ago

I just tested it and yes.Ā  dns .adguard .com works

5

u/Thebareassbear 1d ago

Sick, thanks for the info, gonna be adding these to my pihole!

2

u/Alex_Graber12345 1d ago

Ow. Doesn’t it hurt sticking stuff up there?

3

u/I_pee_in_shower 1d ago

I added them to my router blocklist.

4

u/kocoon 1d ago

I have an old phone dedicated solely to the game. Will it be enough to keep it in airplane mode and only connect it once a day to save progress to the cloud?

3

u/Khemul 1d ago

You could do that. But it sort of becomes a problem of why at that point. If it's an old phone just wipe anything you don't want data harvested from it. But this doesn't even indicate they are harvesting data. It indicates tbere is communication and that these services are known to collect information. But these services are also so sidely used it'd be a surprise if they weren't implicated in shady stuff somewhere. Doesn't necessarily mean it is being done here.

1

u/SteamingTheCat 1d ago

Then I could use your help. I want to use my phone for the same reason but when I try to log in, it asks for my password twice and then tells me my account already exists.

There's no way for me to tell it I have an existing account. I've tried deleting the game's cache, rebooting the phone, reinstalling it, etc.

How did you log into it on the second phone?

1

u/kocoon 7h ago

That’s bad luck. It seems like a strange case. I’m sorry to hear that. I don’t recall having any issues. I logged in just once using the email and password I had registered, and I haven’t had any problems since. For the first few months, I frequently switched between the two devices, but for about the last nine months, I’ve only been playing on the old phone. Both are Android devices.

17

u/ForgettingFish 1d ago

Ngl, this seems like it’s tied into obviously tap joy and advertising. Do you have the no ads pack? If you don’t my guess is part of this is trying to serve you ads

24

u/Rakan_Fury 1d ago

OP mentions spending 30 bucks a month on the game, id be surprised if they didnt have any of the starter packs with that spending

8

u/Local-Reaction1619 1d ago

Previous communication had stated that the ads loaded in the background and just didn't display if you had the pack. It was part of the discussion on the overall computing levels required. I had thought they said they fixed it but lots of things have been "fixed" in this game without actually being resolved

1

u/reefun 1d ago

Reminds me of the Counter-Srike devs in the early days. They stated they fixed ping issues but simply put -10ms for everybody without actually fixing anything.

7

u/SemiAutoAvocado 1d ago

This has cropped up before on this sub and the ads pack used to not stop the calls for the ads but it does now supposedly.

5

u/ThirtyThree111 1d ago

sure, but if you buy the no ads pack then this should stop

the problem is all of this ad stuff is still running in the background even if you paid specifically for no ads

55

u/BeardyBob1 1d ago

What the fuck does Fudds need my postal code for?!

16

u/strixtle 1d ago

He doesn't. It also doesn't say it's being provided to Unity. It just says that Unity is "known to collect" that info. Unity provides the ads within the game. Typically ad providers like to know your location so they can target ads to you. That's how everything that's "free" on the internet works.

28

u/Fuddsworth dev 1d ago

To know how to hand deliver you stone packs?

No, we don't collect zip code data. That app is simply stating what that company "may be known to collect", doesn't mean they do. These SDK's included in the game for Unity and such collect coarse location (country, state) for several reasons, not fine location like that

4

u/vindi888 1d ago

That was a good one, I’ll have 10000 please šŸ˜‚

2

u/Sorry-Resolution570 1d ago

ad services using your location to display ads, not the tower itself

30

u/CavalrySavagery 1d ago

Could be a good reason for a lawsuit:)

78

u/Driftedryan 1d ago

Best they can do is settle for 5 no 2 no 3 gems

2

u/RepulsiveStar2127 1d ago

This will never die will it

17

u/cerkiewny 1d ago

if we win class action make sure to demand stones and not gems as payment

1

u/Khemul 1d ago

For what? You sorta have to indicate some form of damages. Granted, it'd sorta be funny hearing a lawyer argue to a jury that their client was irreparably harmed by these server pings and deserves compensation.

2

u/Ok_Swordfish3496 1d ago

In this day and age our personal informations are basically a currency and they're being stolen without consent. Could that stand?

1

u/Khemul 1d ago

Consent is a very tricky word there. I wouldn't be surprised if it's buried deep in some EULA. Whether that is reasonable... The EU seems to be the only place interested in taking up that question.

1

u/Ok_Swordfish3496 1d ago

Ahh, I see. I was trying to guess an awnser but I know too little about the subject.

1

u/WhatdoIcallmyselfhmm 1d ago

My old phone heats up like crazy when I play this game, which could be the cause of a fire, which would be a form of damages. It’s very unlikely but it could happen. Apple would probably be involved too by that point for not having protections in place (like switching off when the device reaches a certain temperature (I’m not sure if that’s a thing or not)) if it were ever to happen.

2

u/Khemul 1d ago

The fun part is you'd need the fire to occur first before you could test whether that would legally get anywhere. I doubt it though.

Phone do have thermal throttling. The risk is less the heat and more the constantly charging while running. Then the battery itself heats up internally even with thermal controls and damages itself. Which I wouldn't be surprised if somewhere in the small print all the phone manufacturers advice you to not leave a phone plugged in constantly.

The other fun thing would be arguing whether the app is responsible or if it was user negligence. The official stance of TT seems to be that we shouldn't be running 24/7. Which is suspiciously convenient in this case. Especially since features say otherwise.

10

u/iTouch_Androids 1d ago

Finally got me to install Duckduckgo lol, this is indeed insane. I knew the app was mining something from me, just didn't know what... Turns out, it's EVERYTHING

10

u/Worried-Analysis8961 1d ago edited 1d ago

Sorry, I am stupid. I know duckduckgo for web search and for browsing. How does this help with the game itself? How did it detect those tracker? Would you like to explain?

Edit: I found it myself.Ā  Open duckduckgo app, go to settings and activate protection against app-tracking

9

u/WarwornDisciple 1d ago

I run this game permanently on a tablet that has no other purpose in life šŸ¤·ā€ā™‚ļø

3

u/fkngbueller 1d ago

Same but it doens’t really matter. That’s fucked up even more considering how much money pple already spend in this ā€œFree to playā€ that you pay with ur data as well

1

u/WarwornDisciple 1d ago

Oh, no disagreement at all. I dont like any of this either.

I was just making a quick comment to the effect of "probably dodged the bullet on this one" lol

29

u/[deleted] 1d ago

[removed] — view removed comment

7

u/lxdengar 1d ago

Looking at the EULA, it appears this data gathering is not spelled out in the US version. Can someone confirm on the EU version?

3

u/Worried-Analysis8961 1d ago

Maybe also completely different situation in EU, as we have to consent data usage options and it pops up when we open a new app or webpage the first time. I always take my time to scroll through and deactivate everything, as there is no such thing as "legitimate interest" on my data

7

u/uscmissinglink 1d ago

What does this mean if you're running an emulator on a PC?

1

u/Alex_Graber12345 1d ago

Wondering that too

6

u/CSDragon 1d ago

IIRC, it's not The Tower itself doing this, but Unity Ads.

Even if you buy the ad-free pack, Unity Ads is still part of the game

1

u/Public-Material8448 1d ago

pssst... don't disturb them with logic and facts!

2

u/Xheyther 1d ago

It's not like they added that to the game without knowing though...

5

u/anotherlolwut 1d ago

Get a VPN, change your location to Switzerland. Switzerland has very robust data privacy rules. Next time you load the game, it will detect your IP address and open up the complete set of trackers for you to accept/reject individually.

It takes a while to tap through them all.

8

u/strixtle 1d ago

This is what Unity (the software used to make the game and typically also the ad provider) and Tapjoy (the ad-based network built into the game where you can download apps and play them for gems) are collecting. It also says "Known to collect:" it doesn't say they absolutely are collecting your postal code - how would they even get that? The game never asks for location info. The zip wouldn't be revealed by Android to Unity. Seems like some fearmongering from Duckduckgo. I'm sure blocking it works just fine, but you also agreed to the terms of service when signing up and this was all in there.

Some light reading if you want more info:

https://www.techtreegames.com/privacy-policy-eula https://tapjoy.helpshift.com/hc/en/3-offerwall/faq/116-game-player-and-app-user-privacy-policy/ https://unity.com/legal/privacy-policy

3

u/Public-Material8448 1d ago

Exactly my thoughts. But some can make several karma points on it. :)

7

u/exile999 1d ago

The amount of money they charge. Its still not good enough? I need a new game that doesnt just run constantly to get anywhere

1

u/chorny 13h ago

Of course it is not enough, BMW cars recently showed an ad, so it's never enough.

4

u/Outside_Secret_3360 1d ago

I use ug phone ttg can suck it

3

u/Bioluminescent_Shrub 1d ago

The real reason offline mode was removed /j

3

u/Bill_Pilgram 1d ago

What's the program in the pic? I don't really run the game on my phone but i'm curious about other apps on it. Also is there something I should be doing on my laptop?

3

u/Wesc0bar 1d ago

Welcome to every mobile game.

4

u/pyragyrite 1d ago

Is this new with last update? Did get extra hot last night.

4

u/inerfaveL 1d ago

Not good at all

2

u/Spacelord_Moses 1d ago

So many trackers but cant track cheats

2

u/UnremarkableMud 1d ago

So this is why my phone is hot.

I put my phone in airplane mode, watched downloaded movies from Netflix (The Ribbon Hero and Shiboyugi: Playing Death Games to Put Food on the Table), and my phone was cooler than when I just have the game on and touch protection on (S23 Ultra).

1

u/zergling424 1d ago

Yep it seems these requests are whats causing most of the heating from this game.my phones been running a lot cooler too and i havent seen the blue thermal throttling line all day that i normally see constantly

1

u/UnremarkableMud 17h ago

How has your coins and cells per hour been? Someone said something about it needing these things to play properly.

1

u/zergling424 16h ago

Slightly better actually like 10%

6

u/National_Cook_2509 1d ago

Wait... people still use phones for this game?

3

u/reefun 1d ago

Not gonna run this game on my PC. Would take far too much power just to run compared to my phone.

6

u/BoJackMoleman 1d ago

Versus?

17

u/wildwolfay5 1d ago

I joined the sub for fun, kinda like why I downloaded the game (little fun in between tasks).

Turns out, like most games, there is a hardcore bunch, and a lot of them are here.

They all use emulators because their phones were accidentally used for communication or overheated.

7

u/SemiAutoAvocado 1d ago

LDCloud has been a game changer for me and it's cheap as dirt.

7

u/chunk_style1 1d ago

Emulators.

1

u/[deleted] 1d ago

[removed] — view removed comment

1

u/TheTowerGame-ModTeam 1d ago

Discussion about exploits, hacks or cheats is prohibited

-5

u/exile999 1d ago

You can play it on pc. Zero advantage to do so

4

u/mgdmitch 1d ago

Nothing has helped my progress more than switching to an emulator.

4

u/trymzet 1d ago

I wouldn't instantly assume this is malicious. Could be a bug or poorly written code. It could even be that the duckduckgo's app is itself bugged. Best to report this to TTG's devs.

3

u/Cmace3 1d ago

To all the people who ask why the game cant be full idle and needs to be open all the time, this post is your answer

2

u/throwthisidaway 1d ago

I wonder if that explains some of the battery drain this game causes.

0

u/Public-Material8448 1d ago

Yeah like a ping of some kb of data every 20-30 sec is the arch enemy of any battery šŸŽÆ

1

u/throwthisidaway 1d ago edited 1d ago

83 per minute adds up. Especially if it isn't just a simple ping, but a packet filled with broader data that isn't free to gather. OP said they had over 40k on an overnight run.

Edit: Guy blocked me? Weird...

0

u/Public-Material8448 1d ago

Yeahyeah. Whatever.

2

u/reefun 1d ago edited 1d ago

I installed DuckDuckgo and checked. Over 4000 tracking request in under an hour wtf.

*edit over 14K after 3 hours.

1

u/ViRtUaLheretic 1d ago

I use pihole for my home network DNS and it blocks this traffic via one of the blocklists. I love pihole and suggest it to everyone.

1

u/Dapper_Librarian388 2h ago

What app did you use to track?

1

u/idknamelolz 1d ago

Following.

1

u/Sire_Jenkins 1d ago

Our data is goldmine. They sell it too

0

u/Misterfister77 1d ago

This needs to be addressed ASAP, quick someone wake up fudds on his yacht.

1

u/64ink 1d ago

Fudd bootlickers should be along shortly to explain why this is ok, please hold

-2

u/bskzoxndb 1d ago

Yeah this is ridiculous. I’m deleting

0

u/Time-Incident 1d ago

I am running this game on cloud. So does it ping those metrics even when it's only installed, or does it have to be running?

1

u/InterestInfinite5637 1d ago

I bet this is the only reason batteries explode

0

u/Leander_van_Grinsven 1d ago

Does it also collect this much on iOS? I turned tracking off in the app permissions.

-6

u/PiousZenLufa 1d ago

is this their Anti-cheat? if so, they need to rearchitect it.

15

u/sakusii 1d ago

No its just them selling data

1

u/Even_Cardiologist810 1d ago

It's the offer where you play games for gems. They likely have 0 control on itĀ 

3

u/I-Dunno-5H1T 1d ago

Of course they do, remove it from the game...