Sticker Safehouse
Privacy Policy
The short version
- There are no accounts and no sign-in. We never ask for your name, email address, phone number, contacts, photos, location, camera or microphone.
- Your progress, stickers, rooms and Bands are saved only on your device. Deleting the app deletes them.
- The leaderboard is optional. If you join it, the app sends a nickname you choose and your scores to our server. That is all it sends.
- Ads are opt-in, rewarded video only, and always requested as child-directed, non-personalised, family-safe content.
- Purchases go through Apple or Google. We never see your payment details.
- We use anonymous usage analytics to see how the game is played: levels started and finished, purchases made, ads shown. It is tied to a random ID the app makes up, never to your nickname or any account, and it is not used for advertising or to track you across other apps or websites.
- The iPhone app uses Tenjin to measure which of our own ads led to an install, through Apple's privacy-preserving SKAdNetwork. Tenjin receives your IP address, an identifier Apple gives each app maker (IDFV), device and app details and a small summary of game progress. It receives your advertising identifier only if you tap Allow when the app asks.
- There is no crash reporting. On iPhone the app asks once whether it may track you, only to measure our own ads. If you say no, nothing about the game changes.
Who we are
Sticker Safehouse is made by LARK Enterprises LLC, a company in the United States. For anything about this policy or your data, email [email protected].
What the app stores on your device
The app keeps one save file on your phone or tablet. It holds the levels you have completed, the stickers you own, how you have arranged them in each room, your Bands and aura balances, your sound setting, and, if you joined the leaderboard, your nickname and the random player ID and secret described below. The file never leaves the device except for the leaderboard data explained in the next section. Separately, the analytics library keeps a random identifier and a short queue of events waiting to be sent, described under Usage analytics. On iPhone, the ad measurement described below keeps its own random installation identifier, when it first ran, counts and lengths of app sessions, any events waiting to be sent, and the progress summary it last reported. None of this is backed up by us, and we cannot read it.
The leaderboard
The leaderboard is off until you choose a nickname. When you do, the app sends the following to a server we run on Cloudflare:
| What | Why | Who can see it |
|---|---|---|
| The nickname you typed (3 to 14 letters, numbers or underscores) | To show you on the board | Everyone who opens the leaderboard |
| Your scores: aura, sticker count, sets completed, levels won, best streak | To rank you | Everyone who opens the leaderboard |
| A random player ID and a random secret, generated by the server | So only your device can update your row | Nobody. They are never displayed |
The nickname is checked against a list of words that should not appear on a public board, and rejected if it matches. Please do not use your real name or anything that identifies you. We do not ask for, and cannot connect the nickname to, your real identity.
Like any internet service, our server briefly sees the IP address of the device that contacts it. Cloudflare may keep short-lived connection logs for security. We do not store IP addresses in the leaderboard database and do not use them for anything.
A leaderboard row stays until you delete it. You can do this yourself inside the app: open the leaderboard and tap FORGET MY NAME. That erases the nickname and its scores from our server straight away and frees the name for someone else. Your stickers, aura and cleared levels live on your device and are not affected. If you would rather we did it, email the nickname exactly as it appears to [email protected].
Usage analytics
The app sends a small number of gameplay events to PostHog, an analytics service in the United States that processes them on our behalf. We use them only to understand how the game is played and to improve it: which levels people get stuck on, how long a run lasts, whether the shop works. We do not use them for advertising, we do not sell them, and they are not combined with data from other apps or websites to track you.
| What | Details |
|---|---|
| A random identifier | Made up by the app the first time it runs, so we can count players and returning players without knowing who anyone is. It is not your nickname, not the advertising identifier, and not linked to any account. Deleting the app deletes it, and a reinstall starts a new one. |
| Gameplay events | That the game was opened; that a level was started and how it ended (level number, won, lost or left, how long the run lasted, how many lines were drawn); that a Bands purchase completed and which bundle it was; that a rewarded ad was shown. |
| About the app and device | The operating system (iOS or Android), screen size and app version. |
| Your IP address and approximate location | PostHog receives the IP address of the device with each batch of events and uses it to estimate an approximate location, at country and city level. PostHog keeps the IP address and that estimate with the event. We do not use them to identify anyone. |
Nothing you type is ever sent to analytics: not your nickname, not room codes. A purchase event names the bundle only, never the price, your payment details or the receipt. How PostHog handles data is described in PostHog's privacy policy.
Ads
The shop has a WATCH button that plays a rewarded video ad from Google AdMob and pays out Bands when the ad finishes. Ads only play when you press that button. There are no banner ads and no ads that interrupt play.
Every ad request is sent with the following settings, regardless of who is playing:
- child-directed treatment on
- under the age of consent on
- non-personalised ads only
- maximum content rating G, which means suitable for general audiences
Google receives the information it needs to serve the ad, which can include your IP address, the device model and operating system, and the advertising identifier your device makes available. Because every request is marked child-directed and non-personalised, Google does not use that request to build an advertising profile of you. How Google handles this data is described in Google's privacy policy and in How Google uses information from sites or apps that use its services.
On iPhone, if you allowed tracking (see "Measuring our own ads"), the advertising identifier is available to Google too. Ad requests stay child-directed and non-personalised either way.
Measuring our own ads
We may advertise Sticker Safehouse inside other apps, for example through AppLovin. To learn which of those ads led to installs, the iPhone app uses Tenjin, a measurement service in the United States that processes the data on our behalf. The Android app does not use it.
The measurement itself comes from Apple's SKAdNetwork. When an ad leads to an install, Apple sends the ad network, and a copy to Tenjin, a report that a campaign produced an install. Apple delays and groups these reports and leaves out anything that identifies you, your device or the app where you saw the ad. The game adds one number to that report, from 0 to 63, summing up the first days after install: whether a level was started, the highest level won, whether the game was opened again on a later day, whether a rewarded ad was shown, and whether Bands were bought. Nothing else about your play is in it, and never your nickname.
The first time you open the iPhone app, Apple's App Tracking Transparency prompt asks whether the app may track you. You can answer either way and the game is exactly the same: no Bands, levels or stickers depend on it. You can change your answer at any time in Settings > Privacy & Security > Tracking.
When the app opens, the Tenjin software inside it also sends Tenjin:
| What | Details |
|---|---|
| Identifier for vendor (IDFV) | An identifier Apple gives each app maker for a device. It is the same in every LARK Enterprises LLC app on that device and different for every other company. It resets when you delete all of our apps. |
| A random installation identifier | Created by Tenjin's software the first time it runs. |
| Your IP address | Which Tenjin also uses to estimate your country. |
| About the app and device | Device model, operating system and version, language and region settings, time zone, and the app's version and build. |
| Events | App opens and when they happen, the progress number above each time it changes, and, only if you came from an Apple Search Ads ad, the attribution token Apple's own framework provides for that ad. |
If you tapped Allow, Tenjin also receives your device's advertising identifier (IDFA). Tenjin matches it with the same identifier from the ad network that showed you our ad, to tell us which ad led to your install, and may tell that ad network (for example AppLovin) that the install happened, so it can judge how well its ads for us work. That is "tracking" in Apple's sense, which is why the app asks first.
If you did not tap Allow, Tenjin does not receive your advertising identifier: the app tells Tenjin's software never to send it, and Apple keeps it hidden anyway. Tenjin's probabilistic matching, which tries to pair installs with ad clicks using details such as the IP address, is switched off for this app. Either way, we do not use Tenjin to target ads at you or to build a profile of what you do in other companies' apps or websites, Tenjin never receives your nickname or leaderboard scores, and we never sell any of this data. How Tenjin handles data is described in Tenjin's privacy policy.
Purchases
You can buy Bands, an in-game currency, through the App Store or Google Play. Apple or Google handles the whole payment. The app on your device receives confirmation that a product was bought so it can add the Bands. On iOS, purchases are confirmed through RevenueCat, a service that checks with Apple that each purchase is real and keeps a record of it for us (which bundle, when, and what it cost) under a random identifier it creates. The anonymous analytics event described above also names the bundle bought. We never receive your card number, billing address or any other payment detail. Refunds are handled by Apple or Google under their rules.
Bands are also earned for free by playing. Nothing in the game requires a purchase or an ad.
Sharing
You can share a picture of a room using your device's normal share sheet, or copy a room code to the clipboard to send to a friend. A room code contains only the names of the stickers in that room and where they sit. It contains nothing about you. What happens to the picture or the code after you share it is up to you and the app you share it with.
Children
Sticker Safehouse is a general-audience game. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13 in the United States, or under the equivalent age where you live. If you believe a child under 13 has given us personal information, email us and we will delete what we can find. Every ad request is still marked child-directed and non-personalised, as described under Ads. The only thing a player ever types is a leaderboard nickname, which we ask you not to make identifying. If you believe a child has entered personal information into a nickname, delete it in the app with FORGET MY NAME, or email us and we will delete it promptly.
Permissions the app does not use
The app does not request access to your location, contacts, camera, microphone, photo library, calendar, health data, Bluetooth or notifications. On iPhone it asks one question, Apple's App Tracking Transparency prompt, described under Measuring our own ads. It uses the internet only for the leaderboard, usage analytics, ads, purchases and, on iPhone, the ad measurement described above.
Your rights
Wherever you live, you can ask us what we hold about you, ask us to delete it, or object to how it is used, by emailing [email protected]. In practice we hold four things. The first is a leaderboard row: you can delete that yourself from inside the app with FORGET MY NAME, and we will also delete it on request without asking you to prove anything beyond the nickname. The second is the anonymous usage analytics described above. Because those events carry a random identifier that is not shown in the app and not linked to your nickname, we cannot look them up by name; deleting the app stops them, and a reinstall starts a new identifier. The third, on iOS only, is RevenueCat's record of purchases described under Purchases, which is also kept under a random identifier rather than your name. The fourth, on iOS only, is Tenjin's ad measurement described under Measuring our own ads, kept under the IDFV and a random identifier rather than your name, plus the advertising identifier if you tapped Allow; deleting all of our apps resets the IDFV, and turning tracking off in Settings stops the advertising identifier being sent. If you are in the European Economic Area or the United Kingdom, our lawful basis for the leaderboard is your consent, given when you choose a nickname, for usage analytics it is our legitimate interest in understanding and improving the game, for ads and purchases it is our legitimate interest in funding a free game, and for ad measurement it is our legitimate interest in knowing which of our own ads work, with the safeguards above, or, for the advertising identifier, your consent, given when you tap Allow. You also have the right to complain to your local data protection authority. We do not sell personal information and never have.
Security
The connection between the app and our server is encrypted. Leaderboard writes require a secret that only your device holds. Since the leaderboard server never receives anything that identifies a person, the impact of a breach there is limited to nicknames and scores, but we treat it seriously anyway.
Changes
If we change what the app collects, this page changes first and the effective date at the top moves. A change that collects more than today would also be described in the app's store listing update notes.