Google has made changes to the Play Store catalog rules that restrict the provided VpnService API. The new rules prohibit the use of VpnService for filtering the traffic of other applications for monetization, hidden collection of personal and confidential data, and any manipulation with advertisements that may affect the monetization of other apps.
Services are also required to implement mandatory encryption for tunneled traffic and to comply with developer rules related to advertising fraud, permission requests, and malicious activity. Tunneling to external servers is allowed only for applications that explicitly state they perform such functions, and only through the VpnService API. VPN, and only by using the VPNService API. Exceptions for accessing external servers are made for applications where such access is a core functionality, such as parental control programs, firewalls, antivirus software, mobile device management programs, network tools, remote access systems, web browsers, telephony systems, etc.
The changes will take effect on November 1, 2022. Among the aims of the rule changes is to improve the quality of ads on the platform, enhance security, and combat the spread of misinformation. It is expected that the new rules will help protect users from dubious VPN apps that track user data and redirect traffic for ad manipulation.
However, this change will also affect legitimate applications, such as privacy-focused VPN apps that use the mentioned functionality to cut ads and block requests to external services that track user activity. The prohibition of ad traffic manipulation on devices may also negatively impact applications designed to bypass monetization restrictions, such as those redirecting ad requests through servers in other countries.
As examples of applications whose functionality will be affected, there are Blokada v5, Jumbo, and Duck Duck Go. The developers of Blokada have already circumvented the imposed restriction in version v6 by shifting traffic filtering from the user's device to external servers, which is not prohibited by the new rules.
Among other changes to the rules, a ban on fullscreen ads will come into effect on September 30. This applies if such ads cannot be dismissed within 15 seconds or if they appear unexpectedly when users attempt to perform actions in the app. For instance, fullscreen ads cannot be displayed as a splash screen at launch or during gameplay, including when transitioning to a new level.
Starting tomorrow, there will also be a ban on apps that mislead users by posing as another developer, company, or app. This ban includes the use of other companies' logos and app icons, mentioning the names of other companies in the developer name (for example, publishing as 'Google Developer' by someone not associated with Google), false statements of involvement with a product or service, and violations related to trademark usage.
Effective today, there is a requirement that apps with paid subscriptions must provide users with clear means to manage their subscription and cancel it. This includes ensuring that the app offers easy access to a straightforward method for unsubscribing online.
Source: opennet.ru
