Privacy Policy
Last updated: September 25, 2026
Stack Cards Sort has no account system of its own and we run no servers: the only sign-in is Apple's optional Game Center, and that account belongs to Apple. This Privacy Policy explains what the game keeps on your iPhone, what it sends to Apple and to our analytics and crash-reporting provider, and what this website (stackcardssort.guseapp.com) records when you visit. It is published by Guse LTDA (CNPJ 47.758.713/0001-82, Brazil).
1. Who We Are
The data controller is Guse LTDA, CNPJ 47.758.713/0001-82, Brazil. Contact: contact@guseapp.com
2. The Short Version
- The game asks for no account and no personal details.
- Your progress and settings are stored on your iPhone. If you sign in to Game Center, a copy of your progress is also saved to your own iCloud account.
- There are no ads and no advertising identifiers. The game sends gameplay statistics and crash reports to Google Firebase so we can improve it and fix bugs (see section 6).
- Game Center is optional. If you sign in, Apple — not us — stores your leaderboard score, your achievements and, in your iCloud account, a copy of your progress.
- This website uses optional analytics cookies and TikTok marketing cookies only if you consent. TikTok is intended for future ad measurement and remarketing campaigns.
- Meta Pixel (Facebook and Instagram ads) works the same way as TikTok: it runs only if you consent to Marketing cookies.
3. What the Game Stores on Your iPhone
The app writes the following to your device's own storage and never transmits it to us:
- Progress: which levels you have completed, stars earned, and your current hint balance.
- Resume state: a snapshot of the level you are in the middle of, so closing the app does not lose it.
- Settings: Relax Mode, tile shapes, sound and haptics, theme, and language.
- Pro status: whether the one-time Pro unlock has been purchased.
If you sign in to Game Center, your progress — but not your settings, resume state or Pro status — is also copied to your iCloud account; see section 4.
Deleting the app removes all of it from your device. It does not remove the Game Center copy of your progress (see section 4). If you use iCloud or encrypted iTunes/Finder backups, these values may be included in your own device backup — that backup belongs to you and Apple, not to us.
4. Game Center (Optional)
Game Center is Apple's gaming service. The game does nothing with it until you are signed in to Game Center on your device; if you are signed out, every Game Center feature is skipped silently.
When you are signed in, the game asks Apple to:
- submit your total star count to a leaderboard, where other Game Center players may see your standing and your Game Center nickname;
- report your achievements as you earn them — for example your first completed level, level milestones and three-star clears;
- save a copy of your progress — levels unlocked, stars, best move counts and hint balance — to your iCloud account, and read back the copies saved by your other devices, combining them so the best result for each level is kept. This way your progress follows you to another device signed in to the same Apple Account. It needs iCloud Drive to be turned on; without it, the game simply doesn't sync.
The saved copy stays in your iCloud account after you delete the app. You can remove it from your iCloud storage settings on your device.
All of this is processed by Apple under Apple's Privacy Policy. We receive no personal data from it. You can turn Game Center off for this game at any time in iOS Settings → Game Center, and Apple lets you delete Game Center data from your account.
5. Purchases
The only purchase in the game is Pro, a one-time unlock. It is not a subscription and there is nothing to cancel.
Payment is handled entirely by Apple. We never see or receive your card number, billing address or Apple Account. The app checks with the App Store on your device whether the unlock has been bought; Apple gives us only aggregated, anonymous sales reports that cannot identify you.
6. Analytics and Crash Reports
To see which levels are too hard, where players stop and why the game crashes, the app uses Google Analytics for Firebase and Firebase Crashlytics, services provided by Google. They send the following to Google, not linked to your name, email address or Apple Account:
- Gameplay events: levels started and finished, hints used, daily puzzles played, when the Pro offer is shown, and the Pro purchase (product and price).
- Usage and device information: sessions, screens viewed, app version, device model, iOS version, language, and country or region.
- An app instance ID: a random identifier Firebase creates for this installation. It is not the advertising identifier (IDFA), and the game never asks for permission to track you.
- Crash reports: the state of the app when it crashed, with device and operating-system details.
Google uses your IP address to estimate a rough location (country or city) and does not keep the IP address in our reports. We use this data only to understand how the game is played and to fix bugs. It is not used for advertising, it is not combined with data from other apps or websites, and we do not sell it. Deleting the app resets the app instance ID.
7. What We Do Not Collect
- No name, email address, phone number or date of birth
- No account — there is nothing to sign up for
- No advertising identifier (IDFA) and no App Tracking Transparency prompt
- No location, contacts, calendar, photos, microphone or camera access
- No health data
- No payment card details
- No advertising of any kind
The game does not track you: it never asks for App Tracking Transparency permission, and nothing it collects is linked to your identity or used for advertising.
8. What This Website Records
The website is hosted on Cloudflare. Like any web host, Cloudflare records standard request logs — IP address, user agent, the page requested and the time — to serve the site and protect it from abuse.
If you use the contact form, we receive the name, email address and message you type, and we email them to ourselves so we can reply. The form is protected by Cloudflare Turnstile, which checks that a request comes from a person rather than a script. We keep the resulting email for as long as the conversation is useful, and delete it on request.
11. How Long Anything Is Kept
- Game progress and settings — on your device until you delete the app
- Game Center data — held by Apple under Apple's own retention rules; the saved copy of your progress stays in your iCloud account until you delete it
- Website server logs — around 30 days at Cloudflare
- Contact-form messages — until the conversation is finished, or sooner on request
- Analytics — per Google Analytics retention settings, if you consented
- Game analytics — event-level data for up to 14 months under our Google Analytics setting, then only in aggregated reports
- Crash reports — 90 days at Firebase Crashlytics
12. International Data Transfers
We are based in Brazil and our website providers are primarily in the USA. Where personal data from the EEA or UK is involved, we rely on Standard Contractual Clauses under GDPR Art. 46. For Brazilian users we rely on the contractual safeguards of LGPD Art. 33.
13. Children's Privacy
The game contains no chat, no user-generated content and no advertising, and is suitable for children. The gameplay and crash data described in section 6 is collected the same way for every player; it contains no name, contact details or advertising identifier, and it is never used for advertising or profiling. We do not knowingly collect personal data from children through the game or website. The single in-app purchase can be blocked with iOS Screen Time like any other. If you believe a child has sent us personal data through the website's contact form, write to us and we will delete it.
14. Your Rights
Because the game holds your data on your own device, the fastest way to exercise most rights is directly: read it in the app, reset it in Settings, or delete the app. For Game Center data, use iOS Settings → Game Center or contact Apple.
For anything we do hold — essentially contact-form email, website analytics and TikTok marketing event data when you consent — you may request access, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent at any time. Meta Pixel (Facebook and Instagram ads) follows the same rule: it runs only after Marketing consent, and then Meta Platforms Ireland Ltd. / Meta Platforms, Inc. receives website event information and online identifiers for ad measurement and remarketing. Write to contact@guseapp.com. We answer within 30 days (EEA/UK), 45 days (US) or 15 business days (Brazil). You also have the right to complain to your local data protection authority.
Game analytics and crash reports are not linked to your name or to any account, so we cannot look them up by who you are. Deleting the app resets the identifier they are tied to, and the data then expires under the periods in section 11.
15. Notice to California Residents (CCPA/CPRA)
California residents have the rights to know, delete, correct, opt out of sale or sharing, limit the use of sensitive personal information, and not be discriminated against for exercising them. We do not sell personal information. TikTok Pixel is configured in our tag manager and runs only after you consent to Marketing cookies. After you consent to Marketing cookies, TikTok receives website event information and online identifiers for cross-context behavioural advertising; you may refuse or withdraw that consent through cookie settings. Meta Pixel (Facebook and Instagram ads) follows the same rule: it runs only after Marketing consent, and then Meta Platforms Ireland Ltd. / Meta Platforms, Inc. receives website event information and online identifiers for ad measurement and remarketing. The game collects a random app instance ID, gameplay events and crash reports (section 6); they are used only for analytics and bug fixing, and are not sold or shared for cross-context behavioural advertising. Through the website we may receive identifiers (IP address, and the name and email you choose to type into the contact form) and internet activity. To exercise a right, write to contact@guseapp.com.
16. Notice to EEA, UK, and Swiss Residents
Guse LTDA is the data controller. Our legal bases are: legitimate interests for serving and protecting the website and for answering the message you send us, and consent for analytics cookies and TikTok Marketing cookies for future ad measurement and remarketing campaigns. TikTok Pixel is configured in our tag manager and runs only after you consent to Marketing cookies. Meta Pixel (Facebook and Instagram ads) follows the same rule: it runs only after Marketing consent, and then Meta Platforms Ireland Ltd. / Meta Platforms, Inc. receives website event information and online identifiers for ad measurement and remarketing. You can withdraw consent at any time in cookie settings. For the game's analytics and crash reports (section 6), our legal basis is legitimate interests in keeping the game working and improving it; the data is not linked to your identity, and you may object by writing to us — the simplest way to stop it is to delete the app. We use Standard Contractual Clauses for transfers to the USA. We make no solely automated decisions with legal or similarly significant effects. You may lodge a complaint with your supervisory authority — EU list: edpb.europa.eu; UK: ico.org.uk.
17. Aviso aos Residentes no Brasil (LGPD)
A Guse LTDA é a controladora. Seu progresso fica no seu iPhone e, se você entrar no Game Center, uma cópia fica na sua própria conta do iCloud, sob responsabilidade da Apple. O jogo envia estatísticas de uso e relatórios de falhas, não vinculados à sua identidade, ao Google (Firebase), com base no legítimo interesse em manter o jogo funcionando e melhorá-lo (seção 6). As bases legais para o site são o legítimo interesse (funcionamento e segurança do site, resposta às mensagens enviadas) e o consentimento (cookies de análise e cookies de Marketing do TikTok Pixel e do Meta Pixel, apenas se você aceitar). Seus direitos incluem confirmação, acesso, correção, anonimização, bloqueio, eliminação, portabilidade e revogação do consentimento. Para exercê-los: contact@guseapp.com. Reclamações: ANPD (gov.br/anpd).
18. Security
The strongest protection here is structural: there is no account to break into and no database of players to leak. On the website, traffic is served over HTTPS/TLS, the contact form is rate-limited and protected by Turnstile, and Cloudflare's network sits in front of every request. No method is perfectly secure. Please report any vulnerability to contact@guseapp.com.
19. Changes to This Policy
If we change this policy in a way that matters, we will update the date at the top and describe the change on this page. Continued use after a change takes effect means you accept it.
20. Contact Us
Guse LTDA — contact@guseapp.com — stackcardssort.guseapp.com
Subject: 'Privacy Request' or 'Privacy Question'