GDPR Compliance

1. The Short Version

Stack Cards Sort has no accounts and no servers of ours. Your progress, settings and current level are written to your own device and never reach us. The game contains no analytics SDK, no advertising SDK and no third-party network code.

That leaves very little personal data for the GDPR to bite on, and this page is mostly about that remainder: what this website records, and what Apple handles on its own account. For the full picture see our Privacy Policy.

2. What We Actually Process, and Why

As controller, Guse LTDA processes only the following personal data, all of it on the website rather than in the game:

• Contact-form submissions — the name, email address and message you type, emailed to us so we can reply. Lawful basis: legitimate interests(Art. 6(1)(f)) in answering the message you sent us, or steps prior to a contract(Art. 6(1)(b)) where your message concerns a purchase.
• Cloudflare request logs — IP address, user agent, page requested and time, recorded to serve this site and protect it from abuse. Lawful basis:legitimate interests (Art. 6(1)(f)) in the security and availability of the site.
• Google Analytics cookies (_ga, _gid) — set only if you accept analytics in the consent banner. Lawful basis: consent (Art. 6(1)(a)).

We do not process special-category data, we do not profile you, and we do not sell or share personal data for advertising.

3. What We Do Not Process

Your game progress, level times, star ratings, settings and Pro status are device data. We never receive them, so there is nothing for us to give you access to, correct or erase. Deleting the app deletes them.

Purchases are processed by Apple; we receive only aggregated, anonymous sales reports that cannot be linked to you. If you use Game Center, Apple — not us — is the controller of your leaderboard entry, achievements and saved progress snapshot.

4. Your GDPR Rights

You have the following rights over the data we do hold:

4.1 Right to Access

You may request a copy of the personal data we hold about you. We respond within 30 days.

4.2 Right to Rectification

You may ask us to correct inaccurate or incomplete personal data.

4.3 Right to Erasure

You may ask us to delete the email correspondence we hold from you. There is no account to delete, because the app never creates one; to erase your game data, delete the app.

4.4 Right to Restriction of Processing

You may ask us to restrict processing in certain circumstances, such as while you contest the accuracy of data we hold.

4.5 Right to Data Portability

You may request the data you provided to us in a structured, commonly used, machine-readable format.

4.6 Right to Object

You may object to processing based on our legitimate interests, including the server logs described above.

4.7 Rights Related to Automated Decision-Making

We make no decisions producing legal or similarly significant effects based solely on automated processing. Level difficulty is generated by the game on your device and is not a decision about you.

4.8 Right to Withdraw Consent

Where we rely on consent — only analytics cookies — you may withdraw it at any time through the cookie settings link in the site footer.

5. How to Exercise Your Rights

1. Email us at contact@guseapp.com
2. Tell us which right you wish to exercise
3. Include enough detail for us to find the data — usually the email address you wrote to us from

We respond within 30 days. If we need longer we will tell you why. We do not ask for identity documents; requiring more data than we hold in order to answer a request would defeat the point.

6. International Data Transfers

We are based in Brazil and our website providers are primarily in the USA. Where personal data from the EEA, UK or Switzerland is involved, we rely onStandard Contractual Clauses approved by the European Commission (Art. 46). The providers concerned are Cloudflare, Inc. (hosting, request logs, Turnstile and contact-form email delivery) and Google LLC (Google Analytics, only with your consent). Apple Inc. acts as its own controller for the App Store and Game Center.

7. Data Retention

• Contact-form messages: until the conversation is finished, or sooner on request
• Website server logs: around 30 days at Cloudflare
• Analytics: per Google Analytics retention settings, if you consented
• Game progress: on your device only, until you delete the app

8. Cookies and Tracking

We obtain your consent before setting non-essential cookies. The only strictly necessary cookie is cc_cookie, which remembers the choice you made in the banner. You can change or withdraw that choice at any time via the cookie settings link in the footer. The game itself uses no cookies and contains no tracking identifier — there is no IDFA and no App Tracking Transparency prompt, because there is nothing to track.

9. Children's Data

The game is suitable for all ages and collects nothing, so no personal data is gathered from children by playing it. We do not knowingly collect personal data through this website from children under 16 (or the lower age set by your member state under Art. 8). If we learn that we have, we delete it promptly.

10. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

11. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of alleged infringement.

Find your local authority at the European Data Protection Board.

12. Contact Us

• Email: contact@guseapp.com
• Website: stackcardssort.guseapp.com