feat(user): [Data Collection 14] Apply user information policy

[adinauer]

PR Stack (Data Collection)

• feat(core): Data Collection #5759
• feat(core): [Data Collection 1] Add configuration types #5760
• feat(core): [Data Collection 2] Expose SentryOptions API #5761
• feat(core): [Data Collection 3] Add policy resolver #5799
• feat(graphql): [Data Collection 4] Apply GraphQL policies #5800
• feat(database): [Data Collection 5] Apply query policy #5801
• feat(spring): [Data Collection 6] Apply incoming request body policy #5802
• feat(apollo): [Data Collection 7] Apply incoming response body policy #5803
• feat(apollo): [Data Collection 8] Apply outgoing request body policy #5804
• feat(graphql): [Data Collection 9] Apply outgoing response body policy #5805
• feat(http): [Data Collection 10] Apply request header policy #5806
• feat(http): [Data Collection 11] Apply response header policy #5807
• feat(http): [Data Collection 12] Apply query parameter policy #5810
• feat(http): [Data Collection 13] Apply cookie collection policy #5811
• feat(user): [Data Collection 14] Apply user information policy #5812

---

📜 Description

Apply the user information Data Collection policy to automatic identity enrichment across core, Android, and Spring integrations.

The policy controls automatic {{auto}} IP addresses, Spring request and Spring Security usernames, and SDK-generated Android installation identifiers written to user.id and device.id. Explicit userInfo=false suppresses these automatic values, while application-supplied user data and custom SentryUserProvider values remain untouched.

When Data Collection is absent, existing behavior is preserved: sendDefaultPii continues to control automatic IP and Spring user enrichment, while Android installation identifiers remain enabled. The unused private TraceContext user-ID helper is removed without changing generated trace context data.

💡 Motivation and Context

Automatic user identity fields can contain personal or stable identifying data. This wires the existing dataCollection.userInfo option to all supported Java and Android collectors while preserving the legacy bridge for applications that have not configured Data Collection.

Refs #5666

💚 How did you test it?

• ./gradlew spotlessApply apiDump
• ./gradlew :sentry:apiCheck
• Core resolver and event processor tests
• Android event processor, device information, exit-info, and internal SDK tests
• Spring, Spring Jakarta, and Spring 7 request/Security user-provider tests
• git diff --check

📝 Checklist

• I added GH Issue ID & Linear ID
• I added tests to verify the changes.
• No new PII added or SDK only sends newly added PII if sendDefaultPII is enabled.
• I updated the docs if needed.
• I updated the wizard if needed.
• Review from the native team if needed.
• No breaking change or entry added to the changelog.
• No breaking change for hybrid SDKs or communicated to hybrid SDKs.
• Public API changes reviewed by another Mobile SDK team member or implemented according to the develop docs spec.

🔮 Next steps

Complete the remaining Data Collection configuration, documentation, and migration work.

#skip-changelog

⚠️ Merge this PR using a merge commit (not squash). Only the collection branch is squash-merged into main.

[github-actions]

🚨 Detected changes in high risk code 🚨

High-risk code has higher potential to break the SDK and may be hard to test. To prevent severe bugs, apply the rollout process for releasing such changes and be extra careful when changing and reviewing these files:

• sentry-android-core/src/main/java/io/sentry/android/core/InternalSentrySdk.java

[github-actions]

	Messages
📖	Do not forget to update Sentry-docs with your feature once the pull request gets approved.

Generated by 🚫 dangerJS against a0d6c1c

[sentry]

📲 Install Builds

Android

🔗 App Name	App ID	Version	Configuration
SDK Size	io.sentry.tests.size	8.48.0 (1)	release

⚙️ sentry-android Build Distribution Settings

[github-actions]

Performance metrics 🚀

	Plain	With Sentry	Diff
Startup time	341.50 ms	364.64 ms	23.14 ms
Size	0 B	0 B	0 B

Baseline results on branch: feat/data-collection-cookies

Startup times

Revision	Plain	With Sentry	Diff
b0be236	316.30 ms	372.60 ms	56.30 ms

App size

Revision	Plain	With Sentry	Diff
b0be236	0 B	0 B	0 B