Pancakeware

Privacy Policy

Pancakeware LLC · Effective October 31, 2026

This policy explains what Pancakeware LLC (“Pancakeware”, “we”) collects when you play our games, why, and the choices you have. It covers Sticker Peeler on iOS and Android and its account page at account.stickerpeeler.com.

Pancakeware LLC, a California limited liability company, is responsible for your personal information (the “controller” under EU and UK law). Questions or requests: privacy@pancakeware.com

The short version

What we collect

Your account

When a player 13 or over first plays, the game creates an account with a random ID, a support code (such as ABCD-1234, shown to you so our support can find your account), and a guest credential stored on your device. We store only a one-way hash of that credential.

You can link Sign in with Apple, Google or Steam so that your account follows you to other devices. We store only the identifier each provider gives us for you. We don’t store your email address or name, even when a provider offers them. For Sign in with Apple we also keep an encrypted token from Apple, so that we can revoke the game’s access when you delete your account.

Purchases

When you buy tokens, Apple, Google or Valve (Steam) handle the payment. We never see your card or bank details. We receive and keep a record of each purchase: the store’s transaction or order ID, the product, the quantity, the price and currency (when the store provides them), and the time. We also ask the store to confirm each purchase and to tell us about refunds.

Tokens, packs and stickers

We keep a ledger of the tokens you earn, buy and spend, the packs and chat stickers you own, and the boosts you use.

Game progress

To sync your progress between devices we store a progress record (for example, the stickers you have earned). We keep earlier copies for up to 30 days so that we can restore your progress if something goes wrong.

Rewarded ads

When you watch an ad to earn tokens, we record the reward: when it was started and credited, and the ad network’s transaction ID for the view. We also record the revenue the ad reports, which we use for accounting.

Sessions and the account page

We store hashed sign-in tokens so that your devices stay signed in. The account page sets one cookie, which keeps you signed in on that page and is needed for the page to work. We don’t use advertising or analytics cookies on the account page.

Technical information

Our servers run on Cloudflare. To deliver the game, Cloudflare processes your IP address and basic request details (such as the time and the address requested). Our server logs are kept for a short time to fix problems and prevent abuse.

What stays on your device

Advertising

The game shows rewarded ads, which you choose to watch in return for tokens or a boost, through Google AdMob. When an ad is requested or shown, Google may collect information such as your device’s advertising ID, your IP address, your device type and your interactions with the ad. Google describes its use of this information at https://policies.google.com/technologies/partner-sites.

Children

Sticker Peeler is intended for a general audience. On phones and tablets, the game first presents a neutral age question without suggesting an answer.

Players who identify as under 13 use an offline version of the game. In this mode, the game does not create an online account, connect to our servers, request advertisements, offer purchases, or transmit personal information to us or our third-party service providers. The game does not start advertising or other data-collecting third-party SDKs for these players.

Their birth month and year are stored on their device. If the device is backed up, the platform’s own backup (iCloud Keychain or Android backup) includes them; they are never sent to us.

When a player reaches 13, the game asks whether they want to play online. Until they choose to, the game stays offline. If they do, it creates an anonymous account, as described above.

Players can correct their birth month in the game’s menu, only to a later date. If a correction shows that a player with an account is under 13, the game deletes the account first, then plays offline.

Parents and guardians can contact us at privacy@pancakeware.com.

How we use information

If you are in the EEA, the UK or Switzerland, our legal bases are: performing our contract with you (running the game and your purchases); our legitimate interests (security, fraud prevention and support); your consent (personalized advertising); and legal obligations (financial records).

Who we share it with

We don’t sell your personal information for money. We share information only with the service providers we need to run the game:

Under some US state laws, showing personalized ads may count as “sharing” or “targeted advertising”. You can opt out with Privacy options in the game’s menu. We may also disclose information when the law requires it, or to protect our rights and our players.

How long we keep it

While your account exists, we keep what it needs to work. Earlier copies of your progress are deleted after 30 days, and expired sign-in tokens and links are deleted daily. Our server logs are kept for a short time to fix problems and prevent abuse.

When you delete your account, we delete at once your linked sign-ins, sessions and progress, and revoke Sign in with Apple. We also remove your support code and the Steam ID from your Steam orders.

We keep the records of your purchases, token transactions, packs and stickers owned, rewarded ads, and any support actions for 7 years after the account is deleted. We need them for tax and accounting, to handle refunds and chargebacks, to prevent fraud, and to pay the artists whose packs you bought. Then we delete them.

These kept records are stored under your account’s random ID and no longer include your sign-ins, support code or Steam ID. They still include the app store’s transaction or order number for each purchase. The app store, or you with your purchase receipt, could match that number to you. We use these records only for the purposes above, or to answer a request from you.

Your choices and rights

Depending on where you live, you may have the right to:

How requests work. To protect your account, we may ask you to confirm that it is yours, for example from within the game or on the account page. We answer within one month, or within the time your local law sets. If a request is complex, we may need longer and will tell you why. We won’t treat you differently for exercising these rights.

Complaints. If you are in the EEA, you can complain to the data protection authority where you live or work. In the UK, contact the Information Commissioner’s Office. In Switzerland, contact the Federal Data Protection and Information Commissioner. We’d appreciate the chance to help first, at privacy@pancakeware.com.

Where information is processed

We are based in the United States, and our servers and service providers process information in the United States and other countries. When information about players in the EEA, the UK or Switzerland is transferred to the United States or other countries, we rely on our providers’ safeguards. Cloudflare and Google use the EU–US Data Privacy Framework (with its UK Extension and Swiss–US framework) where they are certified. They also use the European Commission’s Standard Contractual Clauses (with the UK Addendum) in their data processing terms. You can ask us for more detail on these safeguards at privacy@pancakeware.com.

Security

Credentials and sign-in tokens are stored hashed, provider tokens are encrypted, and all traffic with our servers is encrypted in transit. No system is perfectly secure, but we work to protect your information.

Changes

If we change this policy, we will post the new version here and update the effective date. If a change is significant, we will tell you in the game.

Contact

Pancakeware LLC, a California limited liability company · privacy@pancakeware.com