GDPR Compliance

1. The Short Version

Stack Cards Sort has no account system of its own and we run no servers; the only sign-in is Apple's optional Game Center, and that account belongs to Apple. Your progress, settings and current level are written to your own device and never reach us. The game contains no advertising SDK; it sends gameplay statistics and crash reports to Google Firebase, tied to a random app instance ID rather than to you. The website has optional analytics cookies and Marketing cookies (TikTok Pixel and Meta Pixel), which run only after the corresponding consent and are used for ad measurement and remarketing.

That leaves very little personal data for the GDPR to bite on, and this page is mostly about that remainder: the game's statistics and crash reports, what this website records, and what Apple handles on its own account. For the full picture see our Privacy Policy.

2. What We Actually Process, and Why

As controller, Guse LTDA processes only the following personal data:

• Game analytics and crash reports — gameplay events (levels started and finished, hints, daily puzzle, Pro screen and purchases), device model, iOS version, app version, a random app instance ID, a coarse location Google estimates from the IP address, and crash diagnostics, processed by Google Firebase as our processor. None of it is linked to your name, Apple ID or advertising identifier. Lawful basis: legitimate interests (Art. 6(1)(f)) in keeping the game working, balancing its difficulty and measuring its sales.
• Contact-form submissions — the name, email address and message you type, emailed to us so we can reply. Lawful basis: legitimate interests(Art. 6(1)(f)) in answering the message you sent us, or steps prior to a contract(Art. 6(1)(b)) where your message concerns a purchase.
• Cloudflare request logs — IP address, user agent, page requested and time, recorded to serve this site and protect it from abuse. Lawful basis:legitimate interests (Art. 6(1)(f)) in the security and availability of the site.
• Google Analytics cookies (_ga, _gid) — set only if you accept Analytics. Lawful basis:consent (Art. 6(1)(a)).
• TikTok Pixel — configured in our tag manager and runs only if you accept Marketing cookies. When allowed, TikTok may receive website events, timestamps, IP address, and browser/device information for ad measurement and remarketing. Lawful basis:consent (Art. 6(1)(a)).
• Meta Pixel (Facebook and Instagram ads) — configured in our tag manager and runs only if you accept Marketing cookies. When allowed, it may set the _fbp and _fbc cookies (up to 90 days) and Meta may receive website events, timestamps, IP address, and browser/device information for ad measurement and remarketing. Meta Platforms Ireland Ltd. and Guse LTDA are joint controllers for the collection and transmission of this data (Art. 26). Lawful basis:consent (Art. 6(1)(a)).

We do not process special-category data or sell personal data. If you accept Marketing cookies, website event data and online identifiers are shared with TikTok and Meta for ad measurement and remarketing; this may count as sharing for targeted advertising under some privacy laws.

3. What We Do Not Process

Your saved progress, star ratings, settings and Pro status are device data. We never receive them as such, so there is nothing for us to give you access to, correct or erase. Deleting the app deletes them. The analytics described in section 2 are not linked to your identity, so we usually cannot find the records that belong to you; deleting the app resets the app instance ID.

Purchases are processed by Apple; we receive only aggregated, anonymous sales reports that cannot be linked to you. If you use Game Center, Apple — not us — is the controller of your leaderboard entry, achievements and saved progress snapshot.

4. Your GDPR Rights

You have the following rights over the data we do hold:

4.1 Right to Access

You may request a copy of the personal data we hold about you. We respond within 30 days.

4.2 Right to Rectification

You may ask us to correct inaccurate or incomplete personal data.

4.3 Right to Erasure

You may ask us to delete the email correspondence we hold from you. There is no account to delete, because the app never creates one; to erase your game data, delete the app.

4.4 Right to Restriction of Processing

You may ask us to restrict processing in certain circumstances, such as while you contest the accuracy of data we hold.

4.5 Right to Data Portability

You may request the data you provided to us in a structured, commonly used, machine-readable format.

4.6 Right to Object

You may object to processing based on our legitimate interests, including the game analytics and server logs described above. The simplest way to stop game analytics is to delete the app.

4.7 Rights Related to Automated Decision-Making

We make no decisions producing legal or similarly significant effects based solely on automated processing. Level difficulty is generated by the game on your device and is not a decision about you.

4.8 Right to Withdraw Consent

Where we rely on consent — Analytics cookies and Marketing cookies (TikTok Pixel and Meta Pixel) — you may withdraw it at any time through the cookie settings link in the site footer.

5. How to Exercise Your Rights

1. Email us at contact@guseapp.com
2. Tell us which right you wish to exercise
3. Include enough detail for us to find the data — usually the email address you wrote to us from

We respond within 30 days. If we need longer we will tell you why. We do not ask for identity documents; requiring more data than we hold in order to answer a request would defeat the point.

6. International Data Transfers

We are based in Brazil and our website providers are primarily in the USA. Where personal data from the EEA, UK or Switzerland is involved, we rely onStandard Contractual Clauses approved by the European Commission (Art. 46). The providers concerned are Cloudflare, Inc. (hosting, request logs, Turnstile and contact-form email delivery), Google LLC (Firebase Analytics and Crashlytics in the game, and Google Analytics on the website only with your consent), and TikTok and Meta Platforms Ireland Ltd., with onward transfer to Meta Platforms, Inc. in the USA (website advertising measurement and remarketing, only with your Marketing consent). Apple Inc. acts as its own controller for the App Store and Game Center.

7. Data Retention

• Contact-form messages: until the conversation is finished, or sooner on request
• Website server logs: around 30 days at Cloudflare
• Game analytics: event-level data for up to 14 months, then aggregated reports only
• Crash reports: 90 days at Firebase Crashlytics
• Website analytics: per Google Analytics retention settings, if you consented
• Game progress: on your device only, until you delete the app

8. Cookies and Tracking

We obtain your consent before setting non-essential cookies. The strictly necessary cookie is cc_cookie, which remembers the choice you made in the banner. Google Analytics cookies and Marketing cookies (TikTok Pixel and Meta Pixel) are optional and require your separate consent. You can change or withdraw that choice at any time via the cookie settings link in the footer. The game itself uses no cookies and does not track you — there is no IDFA and no App Tracking Transparency prompt. Its only identifier is the random Firebase app instance ID described in section 2.

9. Children's Data

The game is suitable for all ages. Its gameplay statistics and crash reports are collected the same way for every player, contain no name, contact details or advertising identifier, and are never used for advertising or profiling. We do not knowingly collect personal data through this website from children under 16 (or the lower age set by your member state under Art. 8). If we learn that we have, we delete it promptly.

10. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

11. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of alleged infringement.

Find your local authority at the European Data Protection Board.

12. Contact Us

• Email: contact@guseapp.com
• Website: stackcardssort.guseapp.com