Most privacy pages are written to make a long list of data collection sound reassuring. This one is short, because the list is short.
There is no server
Stack Cards Sort contains no analytics SDK, no advertising SDK, no crash reporter and no networking code of its own. We are not being modest — outside of the optional Game Center integration, the app makes no network requests at all, because there is nothing for it to talk to. We do not run a players database. You cannot log in, because there is no account to log in to.
That single architectural decision answers most of the questions a privacy policy usually has to dance around. We cannot lose your data in a breach, because we never have it.
What is written to your device
Your progress is stored on your iPhone as ordinary app data: which levels you have cleared, how many stars each one earned, your settings, your hint balance and whichever level you were part-way through when you last closed the app. That is it.
It never leaves the device. Delete the app and it goes with it — there is no copy on our side to restore from, and no “are you sure, we can recover this for thirty days” safety net. We think that trade is worth stating plainly rather than burying.
What Apple handles
Two things happen outside our reach, and both belong to Apple rather than to us.
Purchases. If you buy the Pro unlock, Apple processes the payment. We never see your card, your name or your address. What reaches us is an aggregated sales report with no way to trace a purchase back to a person.
Game Center. This one is optional and off unless you use it. If you do, Apple stores your total-star leaderboard entry, two achievements, and a snapshot of your progress so it can follow you to another device. Apple is the controller of that data, under Apple’s terms; you manage it in iOS Settings under Game Center. Skip Game Center entirely and the game works exactly the same.
No tracking identifier
You will never see the App Tracking Transparency prompt in Stack Cards Sort, because we have nothing to ask permission for. No IDFA, no advertising profile, no cross-app measurement. The app’s privacy manifest declares no tracking and no collected data types, and it declares one API use — reading and writing your own saved progress.
The website is a separate question
This site is not the game. It runs on Cloudflare, which keeps request logs for around thirty days, and it will set analytics cookies only if you accept them in the banner. The contact form emails us what you type so we can reply. All of that is set out in full in our privacy policy.
Different systems, different answers. It seemed worth keeping them apart.