ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/GTMAppAuth.framework/GTMAppAuth”

[chungpdz]

I received an email feedback from the App Store notifying about "ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/GTMAppAuth.framework/GTMAppAuth”, which includes GTMAppAuth, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting February 12, 2025, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: Third-party SDK requirements". I understand that I need to add a privacy manifest file, but I don't know how to fix this in Cordova. Can you help me?

[breautek]

You can look at how the cordova-plugin-file declares it's own bundle which include a manifest.

1. Create a .bundle folder, e.g. MyAppBundle.bundle
2. Create PrivacyInfo.xcprivacy file inside the MyAppBundle.bundle folder. Filename matters!
3. Inside your config.xml, you can import the bundle

<widget ...>
  <platform name="ios">
    ...
    <resource-file src="path/to/MyAppBundle.bundle" target="MyAppBundle.bundle"
  </platform>
</widget>

Do note that cordova-ios 7.1.0 or later is required.

All of Cordova resources uses CDV has a prefix. You should refrain from using the CDV prefix for your app code and resources as they might name clash with Cordova provided assets.

PrivacyInfo.xcprivacy file consists of a specially crafted XML format. You can find more details and reference links on our cordova blog. But it might be easier to use XCode to create a privacy manifest file, and then use the GUI to fill in all your declarations. Then you can copy and paste the resulting PrivacyInfo.xcprivacy file.

[chungpdz]

@breautek Thank you for reply, no i using cordova-plugin-googleplus and cordova-plugin-firebase-analytics