I recently ran into this Spyware Watchdog website which concludes that the Unity editor, many Unity games and Steam are in fact spyware.
You can read the articles for yourself:
Not really surprising since they moved to become a service and platform company instead of a product based one. Stock Unity is inferior to pretty much everything, though I applaud some of their permissively licensed work.
I am a bit puzzled how they manage to dodge GDPR on all of this though given that GDPR explicitly says defaults will be OFF. I suspect they don’t in a fashion not unlike how most US companies don’t bother to pay VAT on their EU dealings.
So… developers are expected to install a plug-in for Unity to be able to make their games GDPR-compliant? Which makes me assume many Unity game developers could technically be sued?