App store marks bundle as "Invalid Binary"

[TinyDobbins]

Describe the bug (REQUIRED)
The App Store marks the bundle as "Invalid Binary" without any additional information.
There was a similar topic on the forum a couple of years ago. I tried changing the MinimumOSVersion in the Info.plist file — first from the default 15 to 16, then to 17 — but it didn’t help.

Defold version (REQUIRED):

• Version 1.12.2

Platforms (REQUIRED):

• Platforms: iOS

[TinyDobbins]

Oh, there was no reason on the App Store Connect site anywhere, but I found it in my email!

ITMS-91064: Invalid tracking information - A PrivacyInfo.xcprivacy file contains invalid tracking information at the following path: “PrivacyInfo.xcprivacy”. NSPrivacyTracking must be true if NSPrivacyTrackingDomains isn’t empty. Keys and values in your app’s privacy manifests must be valid. For more details about privacy manifest files, visit: https://developer.apple.com/documentation/bundleresources/privacy_manifest_files.

[britzl]

Do you have a custom PrivacyInfo.xcprivacy file?

[TinyDobbins]

Initially, my project uses the default file: /builtins/manifests/ios/PrivacyInfo.xcprivacy.

It seems that the contents of this file might be affected by extensions. I suspect the following one:
https://github.com/osov/defold-yandex-easy-monetization.

I renamed the final .ipa file to .zip and inspected the resulting Payload/*.app/PrivacyInfo.xcprivacy file. I discovered the following:

<key>NSPrivacyTracking</key>
<false/>

<key>NSPrivacyTrackingDomains</key>
<array>
  <string>tracking.appmetrica.yandex.net</string>
  <string>tracking.reserve.appmetrica.yandex.net</string>
</array>

The domains are present, but NSPrivacyTracking is set to false — there’s an error here.

However, I can’t find either the PrivacyInfo.xcprivacy file or anything indicating the use of these domains (AppMetrica) in the files of the defold-yandex-easy-monetization directory.

as a workaround I created a custom PrivacyInfo.xcprivacy file where I explicitly set NSPrivacyTracking = true and am currently waiting for verification. It seems this has helped — I haven’t encountered the “Invalid Binary” error anymore (this error is automatically detected within the first minutes after submitting for review).

[britzl]

It seems that the contents of this file might be affected by extensions

Correct. We merge all PrivacyInfo.xprivacy files into the base file you provide in game.project:

https://github.com/defold/extender/blob/dev/server/manifestmergetool/src/main/java/com/defold/manifestmergetool/PrivacyManifestMerger.java

I think what you need to do is to copy PrivacyInfo.xprivacy from builtins and in your copy set NSPrivacyTracking to true:

<key>NSPrivacyTracking</key>
<true/>

[TinyDobbins]

Yes, I’ve done that, and the bunde was approved successfully. Thanks!