Universe Sandbox

Universe Sandbox

Why does this game need my keystrokes from other applications?
I downloaded the game from steam after getting a new computer, a message appeared from settings requesting my keystrokes from other applications. I denied this, of course. Why the hell does Universe Sandbox 2 need to know what i type??? I play on mac if that matters.

Edit: it just requested more hella private information from files completely unrelated to the game. Ive now uninstalled US2. Universe Sandbox 2 = Spyware?
Last edited by urmomonmyblog; Oct 26, 2019 @ 2:48pm
< >
Showing 1-15 of 15 comments
OuijaMawl Oct 26, 2019 @ 4:47pm 
I have never had this game request any of that kind of information, I would suspect something else was installed on your computer from another source. This title is just a physics sandbox simulation nothing else.
Thundercracker Oct 27, 2019 @ 1:05pm 
Originally posted by OuijaMawl:
I have never had this game request any of that kind of information, I would suspect something else was installed on your computer from another source. This title is just a physics sandbox simulation nothing else.
it's unity though, and unity has been pushing their data collection package for some time now.

edit, it was not easyly found through the usual channels i'd expect on steam, but i looked over the EULA. of note:
12 INFORMATION COLLECTION & USAGE



12.1 By installing and using the Software, you consent to the information collection and usage terms set forth in this section and Licensor's Privacy Policy, including (where applicable) (i) the transfer of any personal information and other information to Licensor, its affiliates, vendors, and business partners, and to certain other third parties, such as governmental authorities, in the U.S. and other countries located outside Europe or your home country, including countries that may have lower standards of privacy protection; (ii) the public display of your data, such as identification of your user-created content or displaying your scores, ranking, achievements, and other gameplay data on websites and other platforms; (iii) the sharing of your gameplay data with hardware manufacturers, platform hosts, and Licensor's marketing partners; and (iv) other uses and disclosures of your personal information or other information as specified in the above-referenced Privacy Policy, as amended from time to time. If you do not want your information used or shared in this manner, do not install or use the Software.



12.2 For the purposes all data privacy issues, including the collection, use, disclosure, and transfer of your personal information and other information, the Privacy Policy located at http://www.universesandbox.com/privacy, as amended from time to time, takes precedence over any other statement in this Agreement.
then, looking at the privacy policy:
Disclosure to Unaffiliated Third Parties. We may disclose your personal information to prevent an emergency, to prevent harm to others, to respond to legal requirements, to protect or enforce our rights and policies, to protect or enforce the rights of a third party, or as required or permitted by law (including, without limitation, to comply with a subpoena or court order).



Disclosure to Third Party Service Providers and Online Partners. We may contract with various third parties who help us provide, maintain and improve our products and services. For example, we use a third party to process payments made to us (such as purchases through Steam Workshop), or to perform analytics or other operations. We also contract with several online partners to help manage, monitor and optimize our website and services and to help us measure the effectiveness of our communications and how visitors use the website and application. We take commercially reasonable precautions to prevent such third parties from disclosing your personal information, except for the purpose of providing the services in question. We cannot guarantee that such third parties will not disclose your personal information. Currently, the online partners with whom we share your personal information include:


Google Analytics


Each of these partners has its own privacy policy governing their use of personal information, available on their respective websites. Giant Army does not share, rent, or trade your personal information with third parties for their promotional purposes.

of note here, in the boldened section, "as permitted by law." also, in the service provider section that follows, they mention that they contract with companies that "provide services."

this language is loose enough to permit them to basically sell your information including your email address, ip address, and even the last website you visited.

in light of this, i am uninstalling US^2 until such a time they either compensate me for the sale of my information, or they stop collecting.
Last edited by Thundercracker; Oct 27, 2019 @ 1:21pm
OuijaMawl Oct 27, 2019 @ 7:11pm 
Oh, wow I hadn't looked over this legal language. This is incredibly discouraging. Thank you for sharing that info Dr. Gori. I might also uninstall as well now that I have been made aware of this.
Jar Oct 28, 2019 @ 1:28pm 
BillyTheKid128, I assume you recently updated to macOS 10.15 Catalina? Catalina introduces much more robust security measures and you will likely see similar prompts when first running other applications and games (or just Google the phrase and you'll see plenty of others asking about it with other applications). I promise you Universe Sandbox is not spyware and it is not storing information about your other applications or what you're typing. For the keystrokes message, our best guess is that this is from a plugin we use that helps understand input from different keyboard layouts in different regions of the world. Our game engine (Unity) does not handle this too well, so the plugin grabs the keycodes directly from the system rather than going through Unity.

As for files, it needs access to your Documents folder because that is where simulations, object files, images, and videos are stored. You can see this in your Universe Sandbox folder in Documents. I wish Apple's messages about this were a bit more clear. I understand why you may feel alarmed seeing this! But again, we are not doing anything malicious, this is just new security checks in Catalina.

Dr Gori, we are NOT selling anyone's information. This is a standard EULA and privacy policy. I think the most relevant bit of information in what you quoted is that we share information only with Google Analytics (and have no plans to change this). We use Google Analytics to collect non-personally-identifiable data that we analyze simply to improve Universe Sandbox. We look at data about application crashes, which simulations are most popular, things like that. You can completely disable this if you uncheck "Allow Usage Statistics" in Home > Settings.

Our policies cover our websites too, and yes, we work with many other companies that provide services, such as Steam, Humble Bundle, Amazon, some to provide services like distributing Universe Sandbox and others that process payments if you buy Universe Sandbox on our website. We are not selling your data to anyone.

Last edited by Jar; Oct 28, 2019 @ 1:36pm
Thundercracker Nov 1, 2019 @ 12:14pm 
Originally posted by Jar:
r Gori, we are NOT selling anyone's information. This is a standard EULA and privacy policy.
than please change to a policy that does not allow for those things. if you are not doing it, you do not need me to agree to such in the EULA.

because, you (general you, not you personally) might change your mind in the future, and the terms of the deal now allow you to sell information.

also, while it is easier to update "collective" policies, you really ought to separate those of the site from the game. there is no reason i should have to agree to let you see my last website visited to use the software, but not your website.
gotch Nov 3, 2019 @ 1:42am 
surely a program that records keystrokes is a spy program ,this means it can collect,and pass on,all your passwords and financial transactions as well as any private emails etc.

i shall not be agreeing to any eula that contains this as a possability,and i shall be preventing anyone in my household from installing your spyware.

this is remiscent of those "wallpaper" apps you see on the stores,they work in the same way:pretty pictures of space whilst recording all your private information.

having a clever eula doesnt clear you of being a data thief,nor do clever replies blaming others or "its the software not our fault guv".

this should be removed from sale until an independant group can verify its not a nasty.

obviously therell be the numbnuts that say "i dont care",but then its likely once their bank accounts get hacked in a years time theyll be squeaming the loudest ,,poor dears..wont affect a lot of the others/the fanboy club, as not being old enough to have a bank account etc keeps you safe,,,for a while,,,,till mummy and daddy get hacked instead eh..

oh and well spotted Billy..
Jar Nov 4, 2019 @ 2:30pm 
Again, I promise we are not spyware.

These security messages about accessing keystrokes and files are a brand new thing with the latest version of macOS (10.15 Catalina). Every third party application that accesses files now has to have permission to do so, whether they are save files, settings, or anything else. And every application that uses global shortcuts or otherwise has to access keyboard input separately needs permission. These new security requirements and triggers are new to Mac developers (including us), so we're still working through them. Like I said in my previous reply, we think the plugin we use to interpret other keyboard layouts is triggering this. But it might also be the version of Unity that we’re using (there’s a thread here: https://forum.unity.com/threads/mac-build-rejected-due-for-requesting-for-accessibility-access-for-keystrokes.758789/). I understand the Mac security message sounds concerning, but I promise we are not using it for any malicious purposes.

Does it really make sense that we’d spend years developing a $30 gravity simulator (with a relatively niche appeal) to hide some spyware? That we’d hire astrophysicists and release updates over years in Early Access to do this? A simple and inexpensive wallpaper application makes a bit more sense for that… :)

Originally posted by Dr Gori:
than please change to a policy that does not allow for those things. if you are not doing it, you do not need me to agree to such in the EULA.
Our policy already states explicitly that we do not do this. See the last sentence in what you quoted: “Giant Army does not share, rent, or trade your personal information with third parties for their promotional purposes.” Where we do work with third party companies and services, like Google Analytics, we state explicitly that we only do this so they can “help us provide, maintain and improve our products and services.” It is all about analyzing data about how people use Universe Sandbox so we can improve it. If you'd like, you can turn off usage statistics in Home > Settings.
Dan Dixon  [developer] Nov 4, 2019 @ 6:21pm 
As a quick follow up, I assure you we have zero interest in taking advantage of our customers in any malicious way.

I'm 100% focused on creating the best universe and space simulation software possible, not making a bit more money by throwing our reputation under a bus.
Last edited by Dan Dixon; Nov 4, 2019 @ 6:27pm
ed Nov 5, 2019 @ 6:34am 
I've seen this notification a few times since I installed 10.15. I think what's going on is that Apple is getting stricter about what exactly programs are allowed to do. When the programs were written they included bits and pieces of library code that weren't used and according to the new rules those bits and pieces now need permission to work. They still won't do anything because they never run, but MacOS doesn't know that. So it asks you for permission to run them. Feel free to say no, it doesn't stop anything from working.

I don't think this will go on very long, when developers notice that their applications are asking for strange permissions that's a great incentive to figure out why and clean stuff up.
Thundercracker Nov 23, 2019 @ 12:59am 
Originally posted by Jar:

Originally posted by Dr Gori:
than please change to a policy that does not allow for those things. if you are not doing it, you do not need me to agree to such in the EULA.
Our policy already states explicitly that we do not do this. See the last sentence in what you quoted: “Giant Army does not share, rent, or trade your personal information with third parties for their promotional purposes.” Where we do work with third party companies and services, like Google Analytics, we state explicitly that we only do this so they can “help us provide, maintain and improve our products and services.” It is all about analyzing data about how people use Universe Sandbox so we can improve it. If you'd like, you can turn off usage statistics in Home > Settings.
this is incompatible with earlier sections:
Originally posted by "the EULA:
2.1 By installing and using the Software, you consent to the information collection and usage terms set forth in this section and Licensor's Privacy Policy, including (where applicable)...
the sharing of your gameplay data with hardware manufacturers, platform hosts, and Licensor's marketing partners;
and also:
Originally posted by "the privacy policy":
We may disclose your personal information... as required or permitted by law (including, without limitation, to comply with a subpoena or court order).
emphasis mine.

furthermore, the section you quoted listed "rent, trade, or share." "sell" is none of those things.

again, i know you are denying that your company is doing this, but the thing is you're forcing customers to agree to let you do so. if you are not doing this, there is no need to ask for these permissions. turning off the setting, as you suggest, does nothing to solve the problem. the problem is not the data collection in and of itself, it's that you're asking for permissions you do not need or use.

i should not have to consent to allowing you to view the last website i visited in order to use the US^2 software, which is how it currently is now.
Jar Nov 25, 2019 @ 1:19pm 
The two parts you quoted are talking about different kinds of data -- the first part specifies "gameplay data" (non-PII or non-personally identifiable information), which are the usage statistics I've mentioned. The second part specifies "personal information," which we do not "share, rent, or trade," and trade does include selling. Just to reiterate, I am not a lawyer and I did not write this, but this has been my interpretation, and I do not believe these are in contradiction.

I certainly understand your concern about how this is a collective policy that covers both our website and the actual Universe Sandbox software. As you mentioned, it's easier to maintain a single policy, but I do understand how it may not be ideal as someone who just wants to use the software. We're going to forward this thread to our lawyer and see if they have any comments or suggestions for how we can improve this. Thank you for your feedback!
davidb11 Dec 4, 2019 @ 8:04am 
What confuses me is why Dr. Gori doesn't understand that is in basically every single EULA ever.
Seriously, that's a broad scope message that is in almost every single EULA.

He'd find the same thing in Steam's EULA. Collecting data. I'm pretty sure he agreed to that. :P
Heck, Microsoft has that in their EULA for Windows! Macintosh has the same. Or worded near the same.

IT is literally a catch all in EULA around the world.
I've never seen a single EULA that doesn't contain something akin to that.

Besides, they're not legally binding, so he can flat out ignore it.
I have no idea why people have to be so paranoid that they cannot actually look up and understand how things work.

THe entire point of the EULA saying it can give your personal information is to help the United States government, I.E, the FBI, in case of you doing something illegal.
Last edited by davidb11; Dec 4, 2019 @ 8:05am
Thundercracker Jan 10, 2020 @ 1:19pm 
Originally posted by davidb11:
What confuses me is why Dr. Gori doesn't understand that is in basically every single EULA ever.
Seriously, that's a broad scope message that is in almost every single EULA.
no, it is not.
Originally posted by davidb11:
He'd find the same thing in Steam's EULA. Collecting data. I'm pretty sure he agreed to that. :P
Heck, Microsoft has that in their EULA for Windows! Macintosh has the same. Or worded near the same.
the difference is the data collected is used to drive features of the program itself. this program has no such features.
Originally posted by davidb11:
IT is literally a catch all in EULA around the world.
I've never seen a single EULA that doesn't contain something akin to that.
then you havent read many for many types of product. no, not every single EULA uses this sort of clause.
Originally posted by davidb11:
Besides, they're not legally binding, so he can flat out ignore it.
I have no idea why people have to be so paranoid that they cannot actually look up and understand how things work.
that's a grey issue in my jurisdiction. the enforcability of EULAs is typically on a case by case basis.
Originally posted by davidb11:
THe entire point of the EULA saying it can give your personal information is to help the United States government, I.E, the FBI, in case of you doing something illegal.
no, that's not the point of it, according to the text. in fact, there is nothing they should be able to collect to even give the FBI in such a case, the program does not upload anything to its own service. valve and/or google could have information to share, but that's it. especially given that the FBI's jurisdiction is interstate crime and federal felonies.

Originally posted by Jar:
The two parts you quoted are talking about different kinds of data -- the first part specifies "gameplay data" (non-PII or non-personally identifiable information), which are the usage statistics I've mentioned. The second part specifies "personal information," which we do not "share, rent, or trade," and trade does include selling. Just to reiterate, I am not a lawyer and I did not write this, but this has been my interpretation, and I do not believe these are in contradiction.

I certainly understand your concern about how this is a collective policy that covers both our website and the actual Universe Sandbox software. As you mentioned, it's easier to maintain a single policy, but I do understand how it may not be ideal as someone who just wants to use the software. We're going to forward this thread to our lawyer and see if they have any comments or suggestions for how we can improve this. Thank you for your feedback!
is there any update to this? i generally enjoy the software, and it disgruntles me mightily that i cannot use or reccommend the use of the software due to these issues.

also, in point of fact, there is the distinction of gameplay and personal data in that first section, but then:
(iv) other uses and disclosures of your personal information or other information as specified in the above-referenced Privacy Policy, as amended from time to time.
which is what then goes to "as permitted by law." as i read it, that means it's open season on anything you collect, since you've gained permissions to that effect.
davidb11 Jan 10, 2020 @ 2:38pm 
Sorry, Dr. Gori, I can't take you seriously, for many reasons, not the least of which is the fact that unless you live near a several stellar mass black hole, you should have replied to me earlier.

The EULA of this game literally uses the EULA almost every thing else uses.
Almost no company changes the EULA.

You strike me as way too paranoid to even begin to be taken seriously.
RedCairo Apr 20, 2024 @ 2:43am 
Originally posted by Jar:
Again, I promise we are not spyware.

These security messages about accessing keystrokes and files are a brand new thing with the latest version of macOS (10.15 Catalina). Every third party application that accesses files now has to have permission to do so, whether they are save files, settings, or anything else. And every application that uses global shortcuts or otherwise has to access keyboard input separately needs permission. These new security requirements and triggers are new to Mac developers (including us), so we're still working through them. Like I said in my previous reply, we think the plugin we use to interpret other keyboard layouts is triggering this. But it might also be the version of Unity that we’re using (there’s a thread here: https://forum.unity.com/threads/mac-build-rejected-due-for-requesting-for-accessibility-access-for-keystrokes.758789/). I understand the Mac security message sounds concerning, but I promise we are not using it for any malicious purposes.

Thank you for letting us know about why Macs are giving this message. I was having the same issue and freaked out and uninstalled the game. I was also having other issues with a different program at the same time so that just compound the issue lol. I hope it can be figured out on why it it popping up with the new update.
< >
Showing 1-15 of 15 comments
Per page: 1530 50

Date Posted: Oct 26, 2019 @ 2:45pm
Posts: 15