Stackabees Privacy Policy

1. Who we are

Stackabees is made by Studio Salma, an independent developer based in the Kingdom of Saudi Arabia. "Studio Salma" is the developer name shown on Google Play.

We are responsible for the information described in this policy. In legal terms, we are the "controller" (or "operator") of that information.

• Name: Studio Salma, an independent developer based in the Kingdom of Saudi Arabia
• Email: support@stackabees.com
• Postal address and telephone: available on request by email to support@stackabees.com
• Privacy contact: the owner of Studio Salma (see section 13.2)
• Website: https://stackabees.com
• This policy: https://stackabees.com/privacy/

Stackabees is still being tested. Before it is released to everyone on Google Play, we will add our full legal name, postal address and telephone number to this policy.

2. What the game stores on your device

2.1 The save file

Stackabees needs to remember your game. It keeps a small save file on your device, inside the game's own app storage folder. The file is called progress.json. The game also keeps one backup copy (progress.backup.json) in case the first file gets damaged.

If a save file is ever damaged, the game keeps the damaged copy beside it, with "corrupt" in its name. It then carries on from the backup, or starts fresh if both copies are damaged.

The save file holds:

• Your progress: which collectibles you have unlocked, your Collection Charge, the most recent Daily Challenges you have completed, with their dates, and whether you have finished the tutorial.
• A game in progress: the board, the pieces and the score of an unfinished game, so you can carry on after closing the app.
• Play statistics: best score, total score, games played, lines cleared, highest combo and Daily Challenges completed.
• Settings: music, sound effects, haptics (vibration), Tap to Place, Reduced Motion, Reduced Sensory, High Contrast and language.
• Technical values: the save format version; when the save was created and last changed; for an unfinished game, a random code, the state of its piece shuffler and when it was last saved; the random code of the last game you finished; and small counters and records that make each free booster and bonus count only once (each record is a random code, and the game keeps at most 200).

Some of these technical values have names that mention ads, left over from earlier designs. This version shows no ads: it leaves those counters empty, and it does not use any value for ads. None of them say anything about you.

About the date. The game reads your device's clock. It uses the date to know when a new Daily Challenge starts, to record which days' challenges you completed, and to date the save file and an unfinished game. This stays on your device.

The game engine's own file. Stackabees is built with the Unity game engine. The engine may also keep a small settings file of its own in the game's app storage. It may hold values the engine makes itself, such as a random code or a count of how often the game has been opened. The game does not use these values and never sends them anywhere. The file is deleted with the rest of the game's data.

The save file does not contain your name, email address, photos, location or anything else that tells anyone who you are. The game never sends this file to us or to anyone else, and we cannot see it.

The game itself never sends any of this information off your device. Android's own backup, described in section 2.2, is run by Android and Google, not by the game.

Under Google Play's rules, information that an app keeps only on the device does not count as data "collected" by the app. That is why our Google Play Data safety section declares that Stackabees collects no data.

2.2 Android backup

Android has a backup feature that you control. If backup is on, Android may copy your saved game (the save file and its backup copy) to your Google account. It may also copy it to a new phone when you move your data there. This lets your progress come back on a new device or when you reinstall the game. The game lets Android copy only these two files: damaged copies and the game engine's own settings file are never included.

Android and Google make and store this backup under Google's privacy policy. We cannot see or access it. You can turn backup off, or delete backups, in your device settings or your Google account. Section 12 explains how.

3. What the game does not collect

The Stackabees game does not collect, store on our side or share:

• names, usernames, email addresses, phone numbers, home addresses, birthdays or ages;
• photos, videos, voice or other audio recordings, files or contacts;
• precise or approximate location;
• the advertising ID or any other device identifier, such as IMEI, serial number, MAC address or Wi-Fi network details;
• messages or chat (the game has none);
• anything typed (the game has no text boxes);
• analytics, usage tracking, crash reports or other diagnostics;
• payment details (nothing can be bought).

The game has none of these:

• accounts or sign-in;
• friends lists, leaderboards or sharing;
• notifications;
• web pages inside the app, or links that leave the app.

Sections 7 to 9 explain the few things we may receive outside the game.

4. Permissions

Android apps must list the permissions they use. The version of Stackabees on Google Play asks for only one:

Android grants this permission when you install the game. It does not show a pop-up. You can turn vibration off at any time in the game: Settings > Haptics.

Stackabees does not ask for internet access, location, camera, microphone, contacts, photos, files, phone or the advertising ID. Without internet access, the game cannot send information off your device.

5. Children's privacy

Stackabees is made for families, including children. We designed it for players aged 6 and up. We follow Google Play's Families Policy.

We treat every player as if they might be a child. The game works in the same privacy-safe way for everyone. We do not ask anyone for their age.

What we collect from children: nothing. The game cannot collect personal information from anyone.

Privacy by design. We designed Stackabees with children's privacy rules from around the world in mind, such as the US Children's Online Privacy Protection Act (COPPA) and the UK Age Appropriate Design Code. In practice:

• Only what is needed: the game keeps only your progress, your settings and a few small technical values, and only on your device.
• Private by default: there are no privacy settings to change, because nothing is shared.
• No profiling: we do not build profiles of players. We do not use information to target, rank or personalise anything.
• No location: the game never uses location.
• No nudges: the game never pushes children to share information or to weaken their privacy.
• No contact with strangers: no chat, no messages and no content from other players.
• No tracking or monitoring: nobody can watch what a child does in the game.
• No loot boxes: collectibles unlock in a fixed order, no reward is random, and nothing is for sale. (Only the pieces you place are shuffled, like a deck of cards.)

If a child emails us. Children cannot contact us from inside the game. Sometimes we learn that a message comes from a child. This means a child under 13, or under a higher age where the law where they live says so (for example 14 in the Republic of Korea and Québec, or 18 in India). If so:

• We will use their email address only to reply to them once.
• Then we will delete the message and empty it from our email account's deleted-items folder. Our email provider erases any remaining copies from its own systems on its normal schedule.
• Where it makes sense, our reply will suggest that a parent writes to us instead.

Your rights as a parent. You can:

• ask us what personal information we hold about your child;
• ask us to delete it;
• tell us not to collect or use any more.

Because the game collects nothing, we normally hold nothing. If you think your child has sent us personal information, for example by email, write to support@stackabees.com. Tell us roughly when the message was sent and from which email address. We will tell you what we have and delete it. Parents of any child under 18 can ask us to delete messages from their child.

6. Ads and purchases

Ads. Stackabees shows no ads. It contains no advertising software (no ad SDKs). The boosters and bonuses in the game are free.

Purchases. Stackabees has no in-app purchases. Nothing in the game can be bought, and the game never asks for payment details. If you see a Market screen marked "Coming Soon", nothing in it can be bought.

If this ever changes, we will update this policy first. See section 15.

7. Third parties and sharing

We do not sell, rent or trade personal information. We share it only with the service providers and in the legal cases described below. The game itself has nothing to share.

The game contains no third-party services: no analytics, advertising, crash reporting, social media or sign-in services.

The Unity game engine. Stackabees is built with the Unity game engine. All of Unity's online services are switched off in Stackabees: analytics, ads, purchasing, crash and performance reporting, and hardware statistics. Because the game has no internet access, the engine cannot send anything either.

Google Play. You get Stackabees from Google Play, which Google runs. Google collects some information when you use Google Play and Android, for example to install and update apps and to keep devices safe. Google handles that information under its own privacy policy, not this one: https://policies.google.com/privacy

Google Play gives us some information about the game:

• Summary statistics, such as how many people installed the game, by country, device type or Android version. These do not tell us who you are.
• Crash reports, only if you have allowed your device to share usage and diagnostics data with Google. These can include your device model, your Android version and technical details of the crash. They do not include your name or contact details.
• Reviews and test feedback that you choose to write on Google Play. We see what Google shows us: usually your review, your Google Play public name, and sometimes your device model and app version. We may reply through Google Play.

Our service providers. These providers help us run our support email, our website and our tests:

• Email: our email provider stores our support email (section 8). You can ask us which provider it is.
• Website: our website host, Cloudflare, delivers our website (section 9).
• Testing: Google Play Console holds our tester list (section 8).

They handle information only to provide their service to us, under data processing terms we have agreed with them. We choose providers that protect information at least as well as this policy describes.

When the law requires it. We would give information we hold, such as an email, to others only in two cases: if the law requires it (for example, a valid court order), or to protect someone's safety.

8. When you email us or join a test

Apart from the Google Play information in section 7 and the website visits in section 9, these are the only ways we may receive personal information. Each happens only if you choose to do it, outside the game.

Email. If you email support@stackabees.com, we receive:

• your email address;
• your name, if your email shows it;
• whatever you write or attach.

We use it only to answer you and to fix problems you report. Our email provider stores the messages for us. We will not add you to a mailing list. Please do not send us a child's personal information or anything sensitive.

Testing. We sometimes test new versions of Stackabees with a small group of testers on Google Play. To let a tester in, we add their Google account email address to our tester list in Google Play, or to a Google Group that we use only for the test. We use these addresses only to run the test and to read and answer feedback. We remove them when the test ends, or sooner if the tester asks. Please join tests with a parent's or another adult's Google account.

9. Our website

stackabees.com is a simple information site. It has none of these:

• accounts, forms or comments;
• ads, analytics or tracking pixels;
• social media plug-ins.

It does not load fonts, scripts or images from other companies, and it does not use cookies for analytics or advertising.

Like every website, our site is delivered by a hosting provider: our website host (section 7). When you visit, your browser sends technical information, such as your IP address, your browser type and the page you asked for. The hosting provider uses this to deliver the page and to protect the site from attacks. It keeps this information in its server logs for the limited time set out in its own privacy policy.

We use the hosting service only to run the site and keep it secure. The host processes IP addresses only to deliver and secure the site. These are what children's privacy law calls "internal operations". We do not use this information to identify you, to contact anyone, to build a profile or for advertising, and we do not ask the hosting provider to.

If you tap our email address on the website, your own email app opens. Section 8 explains what happens when you write to us.

10. Storage and security

• On your device. The save file is in the game's own app storage folder. Android 11 and later stop other apps from reading it. On older versions of Android, other apps that you have allowed to read your device storage might be able to see it. The game does not encrypt the file itself. But most Android devices encrypt everything stored on them, and the file holds nothing that identifies you. Your device's screen lock helps protect everything on it.
• Nothing is sent. The game sends no data over the internet, so there is nothing to intercept.
• What we hold. Emails and tester addresses are kept in our email account, our Google Play Console account and, if we use one, our test Google Group. Only we can open them, apart from the providers that store them for us. We protect our accounts with strong passwords and two-step sign-in.
• If something goes wrong. If a security problem ever affected personal information we hold, we would act quickly to fix it. We would tell the people affected and the authorities where the law requires it, within the time the law sets. For example, the authorities in the EU, the UK and Saudi Arabia must be told within 72 hours.

11. How long we keep information

12. How to delete your data

Game data on your device. You can delete it at any time:

1. Reset the game. Open your device's Settings > Apps > Stackabees > Storage, then tap Clear storage (on some devices: Clear data). The game starts fresh.
2. Uninstall the game. This deletes the save file, and the rest of the game's data, from your device.

Archiving the app is not the same as uninstalling it. Archiving is an option on newer Android versions, and Google Play can also do it automatically for apps you rarely use. It keeps your progress on the device.

Backup copies. Clearing the game's storage or uninstalling it does not delete backups that Android has already made.

• To stop future backups, turn off backup in your device settings.
• To delete existing backups, delete the device backup in your Google account (on most phones: Google One or Google Drive > Backups).

Google deletes the whole device backup, not just the Stackabees part.

Information we hold. We have no game data about you on any server, so there is nothing for us to delete there. To delete your emails to us, or to be removed from a tester list, email support@stackabees.com. We will tell you when it is done.

13. Your privacy rights

13.1 Everyone, wherever you live

Wherever you live, you can ask us:

• what personal information we hold about you or your child, and for a copy of it;
• to correct it;
• to delete it;
• to stop using it, to limit how we use it, or to object to how we use it;
• how and why we use it.

We hold very little: normally only emails you have sent us and, if you joined a test, your tester email address. Your game data stays on your device, where you control it yourself.

How to ask. Email support@stackabees.com with "Privacy request" in the subject line. Tell us what you would like, and which email address you used to contact us. We may ask you to reply from that address, so we know the request really comes from you. We will not ask for more information than we need.

How fast we answer. We will answer within the time the law where you live requires, and never later than 30 days. For example, the law gives 10 days in the Republic of Korea and 15 days in Brazil for some requests.

Other points.

• Asking is free.
• A parent or guardian can ask for a child.
• You can ask someone else (an "authorised agent") to ask for you. We may ask them to show that you gave them permission.
• We will never treat you differently for using your rights.

How to complain to us. If you are unhappy with how we handle your information, email support@stackabees.com with "Privacy complaint" in the subject line. We will:

• confirm that we have received it within 30 days (usually much sooner);
• look into it;
• tell you, without undue delay, what we found and what we will do.

You can also complain to a data protection authority at any time (section 13.13). You do not have to complain to us first.

13.2 Our privacy contact

Our privacy contact is the owner of Studio Salma, at support@stackabees.com. This person is also:

• our Chief Privacy Officer for the Republic of Korea;
• our person in charge of the protection of personal information for Québec;
• our contact channel for data subjects in Brazil;
• our contact person for India.

13.3 If you are in the EU, the EEA, the UK or Switzerland (GDPR, UK GDPR and Swiss data protection law)

The controller is Studio Salma (details in section 1; contact: support@stackabees.com).

Stackabees is still being tested, and we have not appointed representatives in the EU or the UK yet. We will appoint them before Stackabees is offered to the public in the EU or the UK, and name them here. Until then, please contact us directly at support@stackabees.com.

This is how we use personal information, and our legal reasons (lawful bases):

Your right to object: you can object at any time to any use of your information that relies on our legitimate interests. Email us and we will stop, unless the law allows us to continue for a compelling reason.

You also have the right to ask us to restrict how we use your information. Where it applies, you also have the right to data portability.

• We do not make decisions about you by automated means, and we do no profiling.
• You do not have to give us any personal information. The game works fully without it.
• The game keeps its save file on your device so that it can give you the game you asked for.

You can complain to a data protection authority:

• in the UK, the Information Commissioner's Office;
• in the EU or EEA, the authority in your country;
• in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

Section 13.13 has the links. We would be grateful for the chance to help you first, but you do not have to contact us first.

13.4 If you are in the United States

Children (COPPA). Section 5 explains how we follow COPPA. Studio Salma is the only operator, and its contact details are in section 1. The game collects no personal information from children. The only exception is an email a child chooses to send us: we use it once to reply and then delete it.

California (CCPA/CPRA and CalOPPA)

• Collected in the last 12 months: the game collected no personal information. Outside the game, we may have received:
  • identifiers, such as an email address or a Google Play public name;
  • the content of messages or reviews you sent us;
  • technical device information in crash reports from Google Play;
  • through our website host, the IP addresses and browser details of website visitors.
• Sources: you, Google Play and our website host.
• Purposes: to answer you, to run tests, to fix the game and to run and secure our website.
• Disclosed for business purposes to: our email provider, our website hosting provider, and Google (Google Play Console, to run tests).
• No selling or sharing: we do not sell or "share" personal information, including for cross-context behavioural advertising, and we have not done so in the last 12 months. We do not sell or share personal information of anyone under 16.
• Sensitive personal information: we do not collect or use it.
• Your rights: to know and access, to delete, to correct, and not to be treated differently for using your rights. Because we do not sell or share, there is nothing to opt out of. You can still contact us.
• Do Not Track and Global Privacy Control: we do not track you across apps or websites, and we do not let anyone else do so. There is no tracking to switch off, so we do not respond differently to Do Not Track signals. We treat a Global Privacy Control signal as a request to opt out of selling and sharing, which we never do anyway.
• Direct marketing ("Shine the Light"): we do not give personal information to anyone for their own marketing.

Other US states. If your state's privacy law gives you rights, you can use them in the same way (section 13.1).

13.5 Saudi Arabia (Personal Data Protection Law)

Studio Salma is based in Saudi Arabia, so the Saudi Personal Data Protection Law (PDPL) applies to the information we handle, wherever you live.

• Who is responsible: Studio Salma, an independent developer based in the Kingdom of Saudi Arabia (section 1). Email: support@stackabees.com. Our postal address is available on request by email.
• What we collect, and how: only emails you choose to send us and, if you join a test, your tester email address. You give these to us directly. Website technical data and information from Google Play are described in sections 7 and 9.
• Why, and our legal basis: to answer you, to run tests and to support the game. We rely on your consent, which you give by choosing to write to us or to join a test. You can withdraw it at any time by asking us to delete your message or to remove you from the test. We also rely on our legitimate interest in answering you.
• Where it is stored: with our email provider and in Google Play Console. These providers may store information outside Saudi Arabia, for example in the United States. We transfer information outside the Kingdom only as the PDPL and its regulation on transfers outside the Kingdom allow. We use a safeguard that the Transfer Regulation recognises, such as SDAIA's standard contractual clauses, or another basis it allows.
• How it is destroyed: we delete it as shown in section 11.
• Your rights:
  • to be told how your information is used;
  • to access it and get a copy in a clear, readable format;
  • to correct it;
  • to ask us to destroy it when it is no longer needed;
  • to withdraw any consent you gave.
• Children: a parent or legal guardian can use these rights for a child (section 5).
• Complaints: please contact us first. You can also complain to the Saudi Data & AI Authority (SDAIA) through the complaint channel on https://sdaia.gov.sa

13.6 Brazil (LGPD)

Brazil's Lei Geral de Proteção de Dados applies to information about people in Brazil.

• Your rights (Article 18):
  • to confirm whether we hold information about you;
  • to access it;
  • to correct it;
  • to have unnecessary or excessive information anonymised, blocked or deleted;
  • to have it transferred to you or another provider (portability);
  • to have information we hold on the basis of your consent deleted;
  • to know who we share it with;
  • to be told what happens if you do not consent;
  • to withdraw your consent.
• Children and teenagers: the game collects nothing from them. If a child emails us, section 5 applies.
• Reply time: we give a full answer to an access request within 15 days.
• Contact: our privacy contact (section 13.2).
• Complaints: to the Autoridade Nacional de Proteção de Dados (ANPD).

13.7 Canada and Québec

• Canada (PIPEDA): you can ask to access and correct information we hold about you. We answer within 30 days. You can complain to the Office of the Privacy Commissioner of Canada.
• Québec: our person in charge of the protection of personal information is our privacy contact (section 13.2). We do not collect personal information from children under 14. If a child under 14 emails us, section 5 applies. You can complain to the Commission d'accès à l'information du Québec.

13.8 Republic of Korea (PIPA)

• Your rights: to access, correct or delete your information, and to ask us to stop processing it. We answer within 10 days.
• Children under 14: the game collects nothing from them. If a child under 14 emails us, we use the message only to reply once (section 5).
• Chief Privacy Officer: our privacy contact (section 13.2).
• Automatic collection tools: the game uses none. Our website does not use cookies for analytics or advertising.
• Storage abroad: if you email us, your email address, your name (if your email shows it) and your message are sent over the internet, when you send it, to our email provider (email us for its name and privacy contact), which may store it outside Korea (for example in the United States). It is kept to answer you, for the time shown in section 11. You can refuse by not emailing us. The game works fully without it.
• Remedies: you can apply to the Personal Information Dispute Mediation Committee, or call the KISA Privacy Center on 118.

13.9 Japan (APPI)

• Our name, address and representative: our name is in section 1, and our representative is the owner of Studio Salma. Our postal address is available on request by email.
• Purposes: sections 8 and 9.
• Security measures: section 10.
• Requests and complaints: support@stackabees.com.
• Foreign transfers: we are based in Saudi Arabia, which has a Personal Data Protection Law (the PDPL, section 13.5). Our providers may store information in other countries, such as the United States. They are bound by their terms to protect it. The Personal Information Protection Commission of Japan publishes information about other countries' data protection systems. You can ask us for more details.

13.10 India (Digital Personal Data Protection Act)

• Your rights:
  • to get a summary of the information we hold about you;
  • to have it corrected, completed or erased;
  • to have your grievance answered;
  • to name someone to use your rights if you cannot.
• Contact person: our privacy contact (section 13.2).
• Reply time: within 30 days.
• Children: in India, everyone under 18 counts as a child. The game collects nothing from anyone.
• Complaints: after using our process in section 13.1, you can complain to the Data Protection Board of India.

13.11 Australia and New Zealand

You can ask us for access to, and correction of, information we hold about you. You can complain to:

• in Australia, the Office of the Australian Information Commissioner (OAIC);
• in New Zealand, the Office of the Privacy Commissioner.

13.12 Türkiye, South Africa and other countries

• Türkiye (KVKK, Article 11): you can ask:
  • whether we process your information, and how;
  • why we process it, and who receives it;
  • for it to be corrected or deleted.

  You can also object, and ask for compensation for damage caused by unlawful processing. We answer within 30 days. You can complain to the Personal Data Protection Board (KVKK).

• South Africa (POPIA): you can ask for access, correction or deletion, and you can object. You can complain to the Information Regulator.
• Everywhere else: many other privacy laws give you similar rights. You can use them by emailing us (section 13.1). We will help you wherever you live.

13.13 Where to complain

You can always complain to the data protection authority where you live.

14. International users

Stackabees may be available in many countries. The game keeps your information on your device, so it does not move your data anywhere.

We are based in Saudi Arabia, and we read and answer emails there. If you email us or join a test, our email provider and Google also store your information. They may keep it in other countries, including the United States. Those countries may have different data protection laws. We protect your information as this policy describes, wherever it is.

• From Saudi Arabia: we transfer information only as the PDPL and its regulation on transfers outside the Kingdom allow (section 13.5).
• From the EU, the EEA, the UK or Switzerland: we use providers whose transfers rely on one of two safeguards:
  • an adequacy decision (for example the EU-US Data Privacy Framework, where the provider is certified); or
  • standard contractual clauses in the provider's terms.
• From other countries with transfer rules (for example Brazil, Japan, Korea and Türkiye): we use the transfer safeguard that each provider offers for that country, where it offers one. Email us to find out which safeguard applies.

Email us for details of the safeguard that applies, and for a copy of it.

Languages. This policy is written in English. We plan to publish it in other languages, starting with Arabic. If a translation differs from the English, the meaning that protects you more applies.

15. Changes to this policy

We will update this policy when the game or the law changes. The "Last updated" date at the top shows when we last changed it. Older versions are listed at the end, and we will send you a copy of any older version if you ask.

Before any version changes how information is used (for example, if a future version uses or shares any information), we will:

• update this policy and the Data safety section of our Google Play listing before that version is released;
• update the copy of this policy inside the game in that same version;
• explain the change in the update notes on Google Play; and
• use only services that Google Play's Families Policy allows in apps for children, with child-safe settings for every player who is, or might be, a child, and ask for a parent's permission wherever the law requires it.

Small changes that do not affect your privacy, such as clearer wording, will be posted here with a new "Last updated" date.

16. Contact us

Studio Salma
An independent developer based in the Kingdom of Saudi Arabia
Postal address and telephone: available on request by email
Email: support@stackabees.com
Website: https://stackabees.com
This policy: https://stackabees.com/privacy/

We read every message, and we try to reply within a few working days. We answer privacy requests within the time the law where you live requires, and never later than 30 days.

Version history

• 12 October 2026: worldwide update. Added rights, reply times and complaint authorities by country, a procedure for complaints to us, a privacy contact, our plan for EU and UK representatives, details of transfers abroad, a fuller description of the save file and a note on languages. The game no longer creates the "install ID" (a random code that development versions, never offered on Google Play, kept in the save file and never used), it keeps only the most recent Daily Challenge records, and Android backup now copies only the saved game (section 2). What the game does with information did not otherwise change.
• 9 October 2026: policy rewritten and expanded (who we are, website, rights in different regions, children's privacy, how long we keep information). What the game does with information did not change.
• 8 October 2026: first version, included in test versions of the game.