Data lines across the play canvas
16 October 2026 · protocol · 3 min read
The four Data safety summaries opened on 16 October 2026 do not say the same thing. This note lines them up and marks the places where the card itself stops talking.
-
Step 1. Split “nothing shared” from “these types”
Mindustry’s summary says no data shared with third parties and no data collected. Shattered Pixel Dungeon’s summary also says no data shared, then names collection: Location, App activity, and App info and performance. Brawl Stars does not say “no data shared”. It says the app may share App activity and Device or other IDs, and may collect Location, Personal info and 5 others. Subway Surfers says it may share Location, Personal info and 4 others, and may collect Location, Personal info and 4 others.
Those four paragraphs are the whole comparison. A shared word such as Location does not mean the apps collect it in the same way. The card does not say how. The easel does not add a how.
-
Step 2. Keep the unfinished counts unfinished
“And 5 others” and “and 4 others” are the card’s own truncation. Expanding them would require a second screen that this check did not treat as copied text. The data-and-permissions page repeats the same cutoff so the long page and this note cannot drift apart. Mindustry’s summary has no “others” line because it says nothing is collected. That absence is specific to that card.
Encryption is printed on three summaries: Shattered Pixel Dungeon, Brawl Stars, and Subway Surfers say data is encrypted in transit. Mindustry’s short summary does not include that sentence, so the Mindustry check does not borrow it from the neighbours.
-
Step 3. File the deletion sentence as a difference, not a footnote
Shattered Pixel Dungeon says data can’t be deleted. Brawl Stars and Subway Surfers say you can request that data be deleted. Mindustry’s summary does not discuss deletion. Three different outcomes from four cards is the result of the pass. Softening them into “see the store for privacy details” would hide the only concrete difference the summaries gave us.
None of this is a security audit. It is a reading of four public blocks on one date. The developers wrote the declarations. The Play Canvas only dated the copy. Re-reading the four summaries side by side is the whole of this note; it does not add a fifth app or a guessed permission.
Install badges are a different block and they are not repeated here except as a boundary. An ads badge on Subway Surfers does not add a data type to its safety summary, and a silent Mindustry header does not prove the safety summary. Each block is read on its own. The date is the same only because the cards were opened on the same day.
What to expect on the data page is one short block per app, the word “others” left intact where Play used it, and no permission list that the summary did not print.