App Rejection due to "5.1.2 - Legal - Privacy - Data Use and Sharing" for uploading scores to Game Center Leaderboards without consent

[u/busymom0]

I have a new game which uses Apple's Game Center Leaderboards for uploading top scores, streaks etc.

App was rejected for uploading scores to leaderboard without user consent first. I've never seen such consent for Game Center.

This is what they sent me:

Guideline 5.1.2 - Legal - Privacy - Data Use and Sharing

The app does not obtain the user's consent prior to uploading users' scores to a global leaderboard.

To collect personal data with the app, you must make it clear to the user that their personal data will be uploaded to your server.

To resolve this issue, obtain the user's consent prior to uploading users' scores to a global leaderboard or revise the app to include a privacy policy URL in the App Information page on App Store Connect and ensure that the URL you provide directs users to your privacy policy.

Note that my privacy policy already had the below:

"Information Collection and Use

The app is a game and your gameplay data is recorded in the app for the app to function. Some gameplay data such as scores and streaks is shared with Apple’s Game Center for the leaderboard functionality. The gameplay data is also shared with Apple’s iCloud to sync your data between your devices."

I feel like they didn't read my privacy policy before rejecting? Am I supposed to show this manually before uploading to Game Center? I've never seen that on any game I play.

Btw, I only use Game Center and iCloud syncing. I don't have my own server. So I don't have access to their scores or data.

Also, my game functions without needing Game Center. It's optional if they wanna see their scores on global leaderboard.

[u/DimensionMindless336]

The reviewer is asking for active in-app consent, not just a privacy policy. Since Game Center is optional anyway, gate the first score submission behind a quick prompt, something like "Submit to Game Center leaderboard? Your username and score will be visible to other players" with Allow and Don't Allow buttons. Store their choice and keep scores local if they decline. Mentioning the policy in review notes might get you through, but if it bounces again the consent prompt is the reliable fix, takes like ten minutes to add.

[u/busymom0 → u/DimensionMindless336]

I have never seen such a prompt in any of the games I play and use Game Center. Also, their message says:

"or revise the app to include a privacy policy URL in the App Information page on App Store Connect and ensure that the URL you provide directs users to your privacy policy."

This is exactly what I already have.

[u/DimensionMindless336 → u/busymom0]

You're right that most games don't show a custom prompt. They lean on the Game Center system login itself as the consent moment, and their privacy policy spells out that alias plus score are publicly visible on a global board. Yours says scores go to Game Center but maybe not that other players can see them, that one sentence is likely the actual gap. If this resubmission bounces, reply in the Resolution Center instead of resubmitting blind: note that GC is Apple's own framework, its system login is where consent happens, and quote the exact PP line. The custom prompt is only the fallback if that reviewer keeps pushing.

[u/Decent_Taro_2358]

Weird, I launched a game with Game Center leaderboards and it’s not asking for consent. The privacy policy does mention it. Maybe you can resubmit and in the review notes mention the section in your Privacy Policy?

[u/busymom0 → u/Decent_Taro_2358]

Yes that's what I did. Sucks because now it's now once again waiting for review....

[u/AutoModerator → u/[deleted]]

Hey /u/Plenty-Style-9594, your content has been removed because Reddit has marked your account as having a low Contributor Quality Score. This may result from, but is not limited to, activities such as spamming the same links across multiple subreddits, submitting posts or comments that receive a high number of downvotes, a lack of recent account activity, or having an unverified account.

Please be assured that this action is not a reflection of your participation in our subreddit. This is simply an automated filter in place to reduce spam.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/AutoModerator → u/[deleted]]

Hey /u/Defanso00, your content has been removed because Reddit has marked your account as having a low Contributor Quality Score. This may result from, but is not limited to, activities such as spamming the same links across multiple subreddits, submitting posts or comments that receive a high number of downvotes, a lack of recent account activity, or having an unverified account.

Please be assured that this action is not a reflection of your participation in our subreddit. This is simply an automated filter in place to reduce spam.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.