Privacy Policy
This policy explains what Pancakeware LLC (“Pancakeware”, “we”) collects when you play our games, why, and the choices you have. It covers Sticker Peeler on iOS and Android and its account page at account.stickerpeeler.com.
Pancakeware LLC, a California limited liability company, is responsible for your personal information (the “controller” under EU and UK law). Questions or requests: privacy@pancakeware.com
The short version
- You can play without giving us your name, email address or phone number. If you’re 13 or over, the game creates an anonymous account for you.
- We keep what the game needs to work across devices: your progress, the tokens and packs you own, and the sign-ins you choose to link.
- Your birth month and year never leave your device.
- Ads come from Google AdMob. Where the law requires it, we ask for your consent first.
- Players under 13 play offline: the game sends nothing about them to us or to anyone else.
- You can delete your account at any time from the game’s menu or the account page.
What we collect
Your account
When a player 13 or over first plays, the game creates an account with a
random ID, a support code (such as ABCD-1234, shown to you so our support can find your
account), and a guest credential stored on your device. We store only a
one-way hash of that credential.
Sign-ins you link
You can link Sign in with Apple, Google or Steam so that your account follows you to other devices. We store only the identifier each provider gives us for you. We don’t store your email address or name, even when a provider offers them. For Sign in with Apple we also keep an encrypted token from Apple, so that we can revoke the game’s access when you delete your account.
Purchases
When you buy tokens, Apple, Google or Valve (Steam) handle the payment. We never see your card or bank details. We receive and keep a record of each purchase: the store’s transaction or order ID, the product, the quantity, the price and currency (when the store provides them), and the time. We also ask the store to confirm each purchase and to tell us about refunds.
Tokens, packs and stickers
We keep a ledger of the tokens you earn, buy and spend, the packs and chat stickers you own, and the boosts you use.
Game progress
To sync your progress between devices we store a progress record (for example, the stickers you have earned). We keep earlier copies for up to 30 days so that we can restore your progress if something goes wrong.
Rewarded ads
When you watch an ad to earn tokens, we record the reward: when it was started and credited, and the ad network’s transaction ID for the view. We also record the revenue the ad reports, which we use for accounting.
Sessions and the account page
We store hashed sign-in tokens so that your devices stay signed in. The account page sets one cookie, which keeps you signed in on that page and is needed for the page to work. We don’t use advertising or analytics cookies on the account page.
Technical information
Our servers run on Cloudflare. To deliver the game, Cloudflare processes your IP address and basic request details (such as the time and the address requested). Our server logs are kept for a short time to fix problems and prevent abuse.
What stays on your device
- Your birth month and year. The game asks once to decide whether it goes online and which ads, if any, it may show you. This answer is never sent to us. It is kept on your device and, if you use them, in your iCloud Keychain or Android device backup.
- Chat sticker images you unlock, your settings, and downloaded game files.
Advertising
The game shows rewarded ads, which you choose to watch in return for tokens or a boost, through Google AdMob. When an ad is requested or shown, Google may collect information such as your device’s advertising ID, your IP address, your device type and your interactions with the ad. Google describes its use of this information at https://policies.google.com/technologies/partner-sites.
- Consent. In the EEA, the UK and Switzerland, and where US state law requires it, the game asks for your choices before ads are requested. You can change them at any time with Privacy options in the game’s menu.
- Tracking on iOS. If you are an adult, iOS asks whether the game may track you. Ads are personalized with your advertising ID only if you allow it. You can change this in iOS Settings under Privacy & Security > Tracking.
- On Android, you can reset or delete your advertising ID in your device’s settings under Google > Ads.
- Age-appropriate ads. Players under 13 are not shown ads, and the ad SDK isn’t started for them. For players aged 13 to 15, ad requests are marked for teen treatment and limited to content rated for teens.
Children
Sticker Peeler is intended for a general audience. On phones and tablets, the game first presents a neutral age question without suggesting an answer.
Players who identify as under 13 use an offline version of the game. In this mode, the game does not create an online account, connect to our servers, request advertisements, offer purchases, or transmit personal information to us or our third-party service providers. The game does not start advertising or other data-collecting third-party SDKs for these players.
Their birth month and year are stored on their device. If the device is backed up, the platform’s own backup (iCloud Keychain or Android backup) includes them; they are never sent to us.
When a player reaches 13, the game asks whether they want to play online. Until they choose to, the game stays offline. If they do, it creates an anonymous account, as described above.
Players can correct their birth month in the game’s menu, only to a later date. If a correction shows that a player with an account is under 13, the game deletes the account first, then plays offline.
Parents and guardians can contact us at privacy@pancakeware.com.
How we use information
- To run the game: your account, syncing between devices, purchases, tokens and packs.
- To keep it secure: preventing fraud, abuse and cheating, and handling refunds.
- To support you, when you contact us with your support code.
- To credit rewarded ads and to account for revenue, including paying the artists whose sticker packs you buy.
- To meet our legal obligations, such as keeping financial records.
If you are in the EEA, the UK or Switzerland, our legal bases are: performing our contract with you (running the game and your purchases); our legitimate interests (security, fraud prevention and support); your consent (personalized advertising); and legal obligations (financial records).
Who we share it with
We don’t sell your personal information for money. We share information only with the service providers we need to run the game:
- Cloudflare: hosting, database and request handling.
- Apple, Google and Valve (Steam): sign-in, payments and purchase verification.
- Google AdMob: advertising, as described above.
Under some US state laws, showing personalized ads may count as “sharing” or “targeted advertising”. You can opt out with Privacy options in the game’s menu. We may also disclose information when the law requires it, or to protect our rights and our players.
How long we keep it
While your account exists, we keep what it needs to work. Earlier copies of your progress are deleted after 30 days, and expired sign-in tokens and links are deleted daily. Our server logs are kept for a short time to fix problems and prevent abuse.
When you delete your account, we delete at once your linked sign-ins, sessions and progress, and revoke Sign in with Apple. We also remove your support code and the Steam ID from your Steam orders.
We keep the records of your purchases, token transactions, packs and stickers owned, rewarded ads, and any support actions for 7 years after the account is deleted. We need them for tax and accounting, to handle refunds and chargebacks, to prevent fraud, and to pay the artists whose packs you bought. Then we delete them.
These kept records are stored under your account’s random ID and no longer include your sign-ins, support code or Steam ID. They still include the app store’s transaction or order number for each purchase. The app store, or you with your purchase receipt, could match that number to you. We use these records only for the purposes above, or to answer a request from you.
Your choices and rights
- Delete your account: in the game’s menu, or on the account page.
- Ad choices: Privacy options in the game’s menu; iOS tracking settings; Android advertising ID settings.
- Access, correction, deletion or a copy of your data, and objections: email privacy@pancakeware.com with your support code, shown in the game’s token panel.
Depending on where you live, you may have the right to:
- access the information we hold about you and receive a copy, including in a portable format;
- correct it;
- have it deleted;
- restrict or object to how we use it, including use based on our legitimate interests;
- withdraw consent at any time, for example to personalized ads, through Privacy options. This doesn’t affect what happened before;
- opt out of the “sale” or “sharing” of personal information, or of targeted advertising, under US state laws;
- appoint an authorized agent to make a request for you.
How requests work. To protect your account, we may ask you to confirm that it is yours, for example from within the game or on the account page. We answer within one month, or within the time your local law sets. If a request is complex, we may need longer and will tell you why. We won’t treat you differently for exercising these rights.
Complaints. If you are in the EEA, you can complain to the data protection authority where you live or work. In the UK, contact the Information Commissioner’s Office. In Switzerland, contact the Federal Data Protection and Information Commissioner. We’d appreciate the chance to help first, at privacy@pancakeware.com.
Where information is processed
We are based in the United States, and our servers and service providers process information in the United States and other countries. When information about players in the EEA, the UK or Switzerland is transferred to the United States or other countries, we rely on our providers’ safeguards. Cloudflare and Google use the EU–US Data Privacy Framework (with its UK Extension and Swiss–US framework) where they are certified. They also use the European Commission’s Standard Contractual Clauses (with the UK Addendum) in their data processing terms. You can ask us for more detail on these safeguards at privacy@pancakeware.com.
Security
Credentials and sign-in tokens are stored hashed, provider tokens are encrypted, and all traffic with our servers is encrypted in transit. No system is perfectly secure, but we work to protect your information.
Changes
If we change this policy, we will post the new version here and update the effective date. If a change is significant, we will tell you in the game.
Contact
Pancakeware LLC, a California limited liability company · privacy@pancakeware.com