usercentrics_sdk

2.30.0 – Aug 19, 2026

Features

• [Unity — Mediation] Added support for Unity's End-User Consent Mode API (EndUserConsent.SetConsentState), mapping UC consent decisions to Unity Vector's AnalyticsIntent/AdsIntent signals — unblocks Unity Ads Vector adoption. Also fixed the dead Unity Ads link in the Consent Mediation docs
• [Android] Added APIs to capture and restore in-flight 2nd-layer consent state across Activity recreation (e.g. dark-mode toggles, single-activity navigation hosts), so unsaved user selections are no longer lost
• [Flutter] Added Swift Package Manager (SPM) support for the iOS plugin, recommended for Xcode 15+, alongside continued CocoaPods compatibility

Fixes

• [Android — Mediation] Fixed CrashlyticsMediationSDK throwing NoClassDefFoundError on Firebase BOM 34+ by resolving FirebaseCrashlytics via reflection instead of the removed KTX API
• [Unity/Android] Fixed a crash during SDK initialization in Unity Development builds on Android (Production builds were unaffected)

2.29.1 – Aug 5, 2026

Features

• [Unity] Added isExempt to the Unity ServiceConsent model, propagating the statistical exception flag to the Unity bridge
• [Mediation] Added Amazon Consent Signal (ACS) mediation support for Android and iOS, including Adjust adapter integration
• [PUR Compliance] Added statistical exception disclosure and toggle UI to the first and second layer, and excluded statistical exception services from Reject All/Deny All, supporting the UK DUAA statistical-exception requirement
• [Unity] Automated the Unity-flavored SPM release pipeline, publishing usercentrics-spm-ui/usercentrics-spm-sdk package tags for Unity releases

Fixes

• [Android] Fixed consent banner rendering behind system bars on edge-to-edge displays
• [Android] Fixed ExternalLinkSpan.onClick crash on invalid/empty link URLs
• [iOS] Fixed app hang caused by synchronous HTML parsing in first-layer banner/content text
• [Android/iOS] Removed residual assert(false) calls in Additional Consent Mode and CCPA save paths that could crash debug builds
• [TV] Fixed DPAD_DOWN navigation escaping the second-layer detail list boundary

Chores

• [Unity] Stripped debug symbols from iOS core release binaries, reducing device binary size by ~31% with no functional change

2.28.2 – Jul 22, 2026

Fixes

• [iOS] Rebuilt UsercentricsUI.xcframework with the Xcode 26 / Swift 6.3.3 toolchain, fixing build failures on Xcode 26.6 for apps consuming 2.27.1/2.28.0 (including via the React Native bridge)
• [PUR] Fixed Consent-or-Pay mandatory purposes silently overriding the user's real TCF consent state on SDK initialization, causing a desync between the SDK's consent getters and the persisted TC string
• [TCF] Removed Special Purposes from the first layer of the TCF banner — not a first-layer requirement
• [TCF] Fixed purposes and special features being disclosed in the second layer (and included in the TC string) even when no vendor declared them, when Stacks are enabled

2.28.1 – Jul 15, 2026

Fixes

• [iOS — Mediation] Fixed AppLovin CCPA setDoNotSell always passing YES regardless of the actual consent value

2.28.0 – Jul 8, 2026

Fixes

• [Android/iOS] Fixed multiple overlapping banner instances on rapid showFirstLayer/showSecondLayer calls
• [Android] Fixed button spacing being ignored in the 2nd layer footer
• [iOS] Fixed Unity static package iOS build failing to compile
• [PUR] Fixed flexible special features/purposes in Consent-or-Pay being forced mandatory instead of showing a toggle
• [Billing] Fixed session buffer overcounting causing a spike in the Displays metric
• [TCF] Removed hard AppsFlyer import and fixed incorrect purpose-one treatment

2.27.3 – Jun 25, 2026

Fixes

• [Android/iOS] Fixed ACM (Additional Consent Mode) initialization silently continuing when selected ATP providers are no longer listed in Google's ATP CDN — the SDK now surfaces the failure correctly instead of proceeding with an empty provider list
• [iOS] Fixed stray PrivacyInfo.xcprivacy file at SPM zip root causing pod install integration warnings

Chores

• [Android] Reduced public API surface: UCButtonSettings, UCButtonType, UCToggle, PredefinedUIAlertDialogFactory, UCSecondLayerViewModel, and related UI internals are now internal or annotated with @InternalUsercentricsApi — these were never part of the documented public API
• [Android] Audited and tightened consumer ProGuard rules

2.27.1 – Jun 15, 2026

Fixes

• [iOS — Accessibility] Fixed VoiceOver announcing wrong language for English content (WCAG 3.1.2 Language of Parts)
• [iOS — Accessibility] Fixed table in second layer not semantically exposed to VoiceOver (WCAG 1.3.1 Info and Relationships)
• [iOS — Accessibility] Fixed CMP links not announced as links by VoiceOver (WCAG 4.1.2 Name, Role, Value)
• [iOS — Accessibility] Fixed VoiceOver focus not restored to language picker after language switch (WCAG 3.2.1 On Focus)
• [iOS — Accessibility] Added visible focus indicator for all assistive technologies (WCAG 2.4.7 Focus Visible)
• [iOS] Fixed crash when tapping service info icon (ⓘ) in Second Layer Categories tab
• [iOS] Fixed UI work not dispatched to main thread in showFirstLayer; added guard against double-presentation
• [Android/iOS] Restored button order to [denyAll, acceptAll] in default button mapping
• [PUR] Fixed vendor consents not set to true when showTogglesForVendors=false on second layer Save

2.27.0 – Jun 1, 2026

Features

• [PUR Compliance] Implemented Mandatory Label and Hide Vendor Toggles on the second layer — purposes and special features absent from publisherRestrictions/specialFeatures maps are rendered as mandatory (pre-consented, non-interactive with a "Mandatory" label), and showTogglesForVendors: false hides toggles on the Vendors/DPS tab while keeping them on the Purposes tab. All logic is gated behind enableConsentOrPay; existing configurations are fully unaffected
• [PUR Compliance] Extended mandatory label and hide vendor toggles behaviour to Flutter, React Native, and Unity bridges
• [Unity] Exposed GDPR legal texts in getCmpData, enabling fully custom TCF UI builds

Fixes

• [Android — Accessibility] Fixed TalkBack reading consent layer content with wrong language pronunciation (WCAG 3.1.2 Language of Parts)
• [Android — Accessibility] Added visible focus indicators to interactive elements in the consent layer (WCAG 2.4.7 Focus Visible)
• [Android — Accessibility] Action buttons now correctly announced as buttons by TalkBack (WCAG 4.1.2 Name, Role, Value)
• [Android — Accessibility] Accordion controls now announced as interactive buttons by TalkBack (WCAG 4.1.2 Name, Role, Value)
• [Android — Accessibility] External links in the consent layer now announced as links by TalkBack (WCAG 4.1.2 Name, Role, Value)
• [Android — Accessibility] Fixed TalkBack focus jumping unexpectedly after accordion expand/collapse (WCAG 3.2.1 On Focus)
• [Android — Accessibility] Consent history table now semantically exposed to screen readers (WCAG 1.3.1 Info and Relationships)
• [Android — Accessibility] History section heading now programmatically marked as a heading for TalkBack navigation (WCAG 1.3.1 Info and Relationships)
• [Android] Fixed button text losing center alignment when label wraps to multiple lines
• [Android] Fixed first layer being blocked on the preview page when consent was already stored
• [iOS] Fixed SPM UI package incompatibility with Xcode 26
• [TV] Fixed CMP initialization failing on Samsung TV 2018 with AbortController is not defined
• [Unity] Added changeLanguage() API to the Unity bridge

2.26.3 – May 14, 2026

Fixes

• [Mediation] Fixed FirebaseAnalyticsMediationSDK failing for apps using Firebase 32+ due to the Firebase KTX migration
• [Mediation] Fixed setAnalyticsCollectionEnabled(true) not being called after consent is granted, causing Firebase Analytics to remain permanently disabled
• [Android] Fixed Protobuf dependency conflict causing runtime errors
• [iOS] Fixed consentMediation flag not being forwarded to the native iOS SDK — InitializeOptionsSerializer now correctly deserializes the consentMediation option, ensuring mediation is activated on iOS when enabled

2.26.2 – Apr 15, 2026

Improvements

• Improved SDK initialization logging

Fixes

• [Android] Fixed consent banner ignoring "Popup" mode dashboard configuration and always showing fullscreen
• [Android] Fixed shouldCollectConsent always returning true after app relaunch on TCF configs
• [Android] Fixed window leak when activity finishes while consent banner is still showing
• [Android] Fixed ATP list updates that could lead to infinite banner resurfaces
• [iOS] Fixed SVG banner logo failing to load due to SVGKit parsing error
• [iOS] Fixed missing padding and misalignment between toggle and label in second layer
• [iOS] Fixed toggle dropdown arrow alignment
• [iOS] Fixed Swift Package Manager unable to resolve usercentrics-spm-ui package
• [TCF] Fixed Stack appearing duplicated under Special Purposes section with broken consent persistence
• Fixed "More" button custom colors not being applied in the first layer
• Fixed mediation consent logs not appearing when applying consent

Features

• Added support for US National (GPP) privacy framework
• Extended GPP API to Flutter, React Native and Unity bridges
• Exposed DPS metadata via new getDpsMetadata() API
• TCF resurfacing period now configurable via Admin UI (1–13 months)

Fixes

• Fixed TCF resurfacing period logic
• Fixed stored information not shown on DPS details
• Fixed TCF maintain legitimate interest logic on Deny All

Improvement

• Patch with security fixes
• UI improvements and fixes

Improvement

• Added specialPurposes and optOut fields to TCF vendor disclosures for detailed storage information
• Added SDKs section in the second layer UI with name and usage

Improvement

• Added a new feature allowing admins to show or hide the "Manage Settings" button
• Added TCF Storage Disclosures and detailed storage information views for CTV.
• Updated logic to ensure unsaved Legitimate Interest settings are correctly captured even after a user clicks "Deny All.
• Added status text for Legitimate Interest (LI) toggles on Android TV and AppleTV to clearly show if they are enabled/disabled
• UI improvements and fixes

Improvement

• Updated CTV first layer CMP to fully align with TCF requirements by displaying purposes and stacks based on the Admin UI configuration, matching web and mobile behavior.
• Added proper labels for Consent and Legitimate Interest toggles in the CTV second layer, resolving TCF policy check 23.
• Introduced vendor storage information section (cookies and non-cookie access details) in the CTV second layer, addressing TCF policy check 24.
• Changes apply to both Android and iOS CTV implementations.

Improvement

• Patch with security fixes

Improvement

• TCF 2.3 Support: fixes about tcString

Improvement

• TCF 2.3 Support: Support the latest Transparency & Consent Framework 2.3.
• Special Features Section: Added support for the new Special Features/Purposes section.
• Fix issue where the SDK failed to initialize offline.

Improvement

• Patch with security fixes

Feature - Consent Mediation

• Fixed bugs related to Google Consent Strings on DenyAll, ensuring correct consent handling
• Resolved geolocation issue reported in version 2.22.2
• Fixed accessibility contrast issues for improved usability

Feature - Consent Mediation

• Added support for AirBridge SDK
• Add GDPR API AcceptAll / DenyAll / SaveDecisions for Unity
• Fixed dependency download issue in versions 2.22.0 and 2.22.1.
• Added missing Proguard rules for Airbridge in versions 2.22.0 and 2.22.1.

Android/iOS Bug Fixes:

• Improvements to geolocation handling
• Adjustments to DAU tracking logic

Improvement

Android/iOS Bug Fixes:

• Fixed crashes related to the UI

Feature - Consent Mediation

• Added support for AppsFlyer SDK
• Added support for Singular SDK

Improvement - Exposing category field in UsercentricsServiceConsent object

iOS Bug Fixes:

• Accessibility improvements with VoiceOver and keyboard focus
• Fixed button sizes when expanding font size

Improvement: Accessibility Enhancements

• iOS: Enhanced VoiceOver support when expanding cards across all compliance frameworks.

Improvement: Accessibility Enhancements

• Android & iOS: Implemented general accessibility improvements, including better color contrast, adjustments to touch target sizes, improved focus order, and fixes to prevent keyboard traps enhancing compatibility with assistive technologies and overall usability.

Improvements: Accessibility Enhancements - Enhanced accessibility features to provide a more inclusive user experience.

• Android Bug Fixes:
  • Ensured minimum touch target size of 24dp for interactive elements.
  • Added status messages to announce additional content for screen readers.
• iOS Bug Fixes:
  • Added status messages to announce additional content for screen readers.
  • Fixed dynamic type behavior to correctly resize text when accessibility text size is increased.

Feature

• TCF Updates - TCF library updated to version 1.5.15 to resolve LI signaling ambiguity for vendors with Purposes under consent and Special Purposes
  • Implemented LI signalling to vendors only registered for Special Purposes with TCF Technical specifications
  • Added support for new languages: Albanian (SQ), Chinese Traditional (ZH-HANT), Georgian (KA), Hindi (HI), Thai (TH), Vietnamese (VI)

Improvements

• Resolved an SDK cache issue that was causing the banner to display an inconsistent UI.
• Accessibility features for a better user experience.

Fixes

• Apple TV issue where focus would be lost when a cell contained a long description label.
• Restore User Session issue where resurfacing did not occur when switching sessions between users.

Fixes

• An error occurring when trying to migrate from version 7 to 8.
• Issue causing SDK initialization to fail when using a specific version with Google's ATPs disabled.

Improvements

• iOS - Enhanced accessibility by increasing the contrast of the focus indicator.
• Flutter - Exposing the stack trace when SDK initialization fails.

Fixes

• Issue causing a temporary unstable SDK state when calling the clearUserSession() API

Android Bug Fixes

• Memory leak that occurred when displaying the banner's First Layer

iOS Bug Fixes

• Accessibility by addressing instances where multiple links had identical link text

Android Bug Fixes

• Inconsistencies when showing the banner using the windowFullscreen parameter

Fixes

• Google Consent Mode edge case when setting analytics_storage flag
• Clear User Session edge case when using caching certain requests

Features

• Removed support for Adjust version 4.

Improvements

• Flutter: Exposed legalBasis field in UsercentricsCMPData class

Android Bug Fixes:

• Full-screen mode was not properly applied on certain devices, causing the banner to be displayed within the safe area.
• Banner content was hidden by the selfie camera when full-screen mode was activated.

Features

• Added support for manual resurface in the mobile SDK, which can be triggered through Admin Interface.

Improvements

• Exposed readLess label in UsercentricsLabels object

Improvements

• Caching solutions - Improved our cache solution to provide faster initializations and better UX

Fixes

• [Fix] Crash when attempting to restore user session with controller id that only has TCF component

Android Bug Fix:

• [Fix] Fixed issues related to dismissing banners in inactive activities.

Features

• Added support for right-to-left (RTL) languages in our SDK for enhanced localization and global accessibility.

Fixes

• General fixes and performance improvements

Improvements

• Update to improve compatibility and ensure smoother performance with Google Consent Mode

Improvements

• Update to improve compatibility and ensure smoother performance with Google Consent Mode

Improvements

• TCF V5 - Updated to new TCF Policy version
  • Updated TCF banner second's layer to reflect the latest addition of Special Purpose 3
  • Updated TCF banner second's layer to include information related to the CMP’s maximum device storage duration
• Adjust Consent Mediation
  • Adding support for new Adjust version 5
  • Adjust version 4 will be supported until October 31, 2024

iOS Bug Fixes

• ironSource Consent Mediation for CCPA not being applied
• HTML text not being rendered correctly

Features

• New timeout mode - In this version, you are able to customize the global timeout for the maximum amount of time that the SDK should take to fully initialize, just set the new parameter on the UsercentricsOptions

Other Fixes

• Toggle visibility of Deny Button on Second Layer for TVs
• Stability improvements when initializing the SDK

Improvements

• Google Consent Mode: Enhanced implementation when integrating with the TCF framework
• Deprecating copy field from UsercentricsLabels

Other Fixes

• Crash when invoking showSecondLayer(...) method without arguments
• Adding missing labels in UsercentrisLabels object

Other Fixes

• Rare crash when initializing the SDK with TCF configuration
• Unity Ads SDK Mediation adjusts

Improvements

• Firebase Consent Mediation: Improved integration with its flags

Android Bug Fix

• Fixed issues related to displaying banners in inactive activities

Other Fixes

• Addressed sporadic crashes during TCF banner initializations on iOS.
• Enhanced code efficiency for smoother consent banner displays.

Improvements

• Consent mediation - Specific implementation for Firebase Analytics and Advertising SDK
• Reset method deprecated for the SDK, React Native, Flutter and Unity
• Added support for new TCF languages
• Change TCF resurface period: from 13 months to 390 days

iOS Bug Fixes

• UI improvement

General Fixes

• Some DPSs had the cookie storage wrongly displayed

Improvements

• Upgrade to latest Kotlin version 1.9.23
• Officially changed Android SDK minimum version to API 21
• Releasing iOS SDKs that supports manual linkage
• General improvements on Google Consent Mode
• Apple Privacy Manifest** - Added new requirements to support new compliance rules, check them out here

iOS Bug Fixes

• Crashes on Xcode 15.2 when using new Apple's libraries linkage mechanism
• IronSource Consent Mediation integration tweaks to support their latest release

Other Fixes

• Links not supported on banner message customizations were being displayed
• Controller ID card were not visible in certain conditions when Google Additional Providers were not present
• GDPR Banner was reappearing after a very specific scenario that changed the rule if it should be resurfaced or not

Improvements

• Supports Read More on Banner Message - Adds support to have a "read more" button on banner message displayed on the First Layer

iOS Bug Fixes

• Sporadically crashes on getUserSessionData API

Android Bug Fixes

• Sporadically crashes on TCF banner initializations

Other Fixes

• Stability improvements

Features

• Resurface Banner for Additional Tech Providers - When changing Additional Tech Providers from Google, we are now enabling an option on Admin Interface to choose whether this should cause the banner to resurface or not

Improvements

• Documentation about Consent Mediation on Flutter and React Native
• Support for Android Gradle Plugin 8 for Flutter
• Reset API will be deprecated in future versions

iOS Bug Fixes

• UI improvements on spacing between labels

Features

Clear User Session - Introducing a new API designed to simplify the process of clearing user sessions

Improvements

Google Consent Mode Granular Choices - Enhances integration with Google SDKs by updating to the latest changes.

Adjust Granular Consent - By Using Consent Mediation, we have fully integrated with Adjust SDK updates associated with the DMA

iOS Bug Fixes

[Fix] Adjusts in landscape mode where labels were not fully aligned with other elements of the screen [tvOS Fix] Numerous layout modifications have been made to address the arrangement of titles and the rendering of other elements in languages that result in larger text sizes

Other Fixes

[Fix] Removes deprecated field TCFVendor::deviceStorage [Fix] In certain scenarios, the 'Save Settings' button color was not customizable

Hotfix

• Initialization with SettingsId was not reporting the status correctly

Features

New Usercentrics Ready API - The API's new properties introduce a feature that, through Rulesets, allows identification of scenarios where the banner may be bypassed in specific locations, check it out

Improvements

Removes TCF 2.0 warnings - Since TCF 2.0 has been deprecated, we've removed all warnings regarding the usage of version 2.0 of this framework New TCF 2.2 Stacks - Added support for Stacks 44 and 45

Android Bug Fixes

[Warning] ⚠️Support for versions lower than Android 5.0 (API Level 20) is planned to be removed in releases starting from end of March/24 [Fix] Fully removes support for TLS 1.2 in Android versions lower than 5.0 (API Level 20)

iOS Bug Fixes

[Fix] Banner was not correctly rendered given some specific programmatic customization scenarios [Fix] Fixes layout constraints when changing the language for CCPA banners

Other Fixes

[Fix] General improvement on resurfacing logic for any Legal Basis change on TCF Purposes

Features

• Consent choice persistence** - Prevents repeated banner displays across geographies for users moving across different legal frameworks (i.e. in case of frequent travellers)

Improvements

• Displaying the count of third-party vendors by category title

Android Bug Fixes

• Improved UX on language selector popup

iOS Bug Fixes

• Enhancing the UI of First-layer Popups and Sheets for Optimal Display on iPads

Other Fixes

• Aligned purposes descriptions/illustrations and vendor data with GVL translation
• Edge case when certain services, hidden by their respective categories, were visible"
• Minor issues on session restoration when using TCF

Improvements

• Adds AC String into Updated Consent Event API

Other Fixes

• Ensures accurate and proper display of large links on the Banner First and Second layer
• Deprecates deviceStorage field on TCF Vendor class
• Field in CCPA Data optedOut is nullable

Improvements

• Rework of session restore checks to prevent empty/bogus Controller ID

Android Bug Fixes

• Controller ID card replaced at the bottom when using Google Additional Consent
• Language selection menu will respect programmatic customization parameters
• Warning for Chartboost SDK when R8 is enabled
• Minor UI glitch where tab names were truncated when displaying the second layer in landscape mode

iOS Bug Fixes

• Prevent fatal exceptions for a known iOS issue, more details here

Other Fixes

• Solved for Webview continuity previously not restoring consents to Google Additional Technology Providers
• Solves the problem where the option 'Show non-IAB purposes only for EU users' incorrectly impacts users from specific regions
• Application of consents when configuring the CMP to 'Do Not Display' with Geolocation Rules

Resolved Issues

• Google Additional Consent Mode V2 - models were not exported and publicly available :cry:

Features

• Google Consent Mode V2 Support - Seamlessly integrate with the latest Google Consent Mode, ensuring enhanced privacy compliance and meeting Google requirements.
• Google Additional Consent Mode V2 - Integrate with the latest Google Additional Consent, allowing you to collect and signal additional consent for ad tech providers not covered by the IAB TCF V2.2.
• Display Number of Vendors for Each Purpose on TCF - Easily view the number of vendors associated with each purpose in the Transparency and Consent Framework.
• Chartboost SDK in Consent Mediation - Optimize revenue by effortlessly managing the Chartboost SDK within Usercentrics Consent Mediation.

Improvements

• TCFUserDecisions API update - All properties have been changed from variables to constants. The adTechProviders field has been added which represent consents for Google Additional Consent Mode. On iOS this is a required argument, so if this is irrelevant for your configuration, just set an empty list, when needed.
• Location is only cached by the SDK for offline mode.

Android Resolved Issues

• Avoid fetching any image resource after the banner has been closed.

iOS Resolved Issues

• Prevent Long Privacy Legal Links from Being Truncated.
• Enable Scaled Fonts resources when using Custom UI.

Other Resolved Issues

• Third-Party Vendors Count misalignment in some configurations.
• Fix the bug causing the banner to reappear for users outside the European Union, despite configurations being specifically set to enforce GDPR compliance exclusively for EU users.
• Update Link to Report Issues on Zendesk.