Cuddle Shop: your privacy

Cuddle Shop is made and published by Daniel Bobunov, an independent developer based in New Jersey, USA, who publishes games under the name Oversauced. The seller name on the App Store is the same person. In this policy "we", "us" and "our" mean that developer. We are the "controller" of the personal data described here (the one who decides how it is used).

This policy covers the iPhone game Cuddle Shop. It is the same policy we use for all our games (shared version).

Questions about this policy or your data: (or see Contact).

In short: very little, and nothing that names you. No accounts, no chat, no contacts, photos or GPS. Your game save stays on your phone.

We do not collect: your name, phone number, contacts, photos, precise (GPS) location, health or financial data, browsing history, messages or any other content you create. Cuddle Shop has no accounts, no chat and no free-text fields.

How this matches our App Store privacy label

Apple asks every developer to declare the data an app collects. Cuddle Shop's label says exactly this:

"Linked to you" is Apple's term for data tied together by a random identifier. It does not mean we know who you are: we never have your name or email unless you write to us.

In short: to run the game, deliver what you buy, show the ads that keep it free, and (if you agree) make it better. We never change how hard a level is because of what you spend or watch.

On-device pacing. Cuddle Shop decides on your phone when to suggest a reward video or an offer, using the play history stored on the device (for example how many levels you played today). This never leaves your phone, is not used to profile you, and has no legal or similarly significant effect on you. It never changes how difficult a level is because of spending or ads.

In short: ads pay for the game. Ads only use your activity in other apps if you say yes on iPhone. Saying no changes nothing in the game.

• Tracking (App Tracking Transparency). After you have played a little, we show a short card and then the iPhone prompt asking whether ads may use your activity from other companies' apps and websites. We read the advertising identifier (IDFA) only if you tap Allow. If you say no, you see the same number of ads; they are just less relevant. Change it any time in iPhone Settings → Privacy & Security → Tracking (Apple's guide). We never reward you for allowing tracking.
• EU/EEA, UK and Switzerland. Google's consent form asks before any personalized ads. Change your answer any time in Settings → Privacy & purchases → Ad privacy choices.
• US states. Settings → Privacy & purchases → Do not sell or share my info stops our ad partners from using your data for targeted advertising (section 8).
• What you see. Ads are limited to a PG content rating and screened by AppLovin's ad review. Reward videos play only when you tap for one. Saw an ad that shouldn't be there? Use Settings → Privacy & purchases → Report an ad, or write to us.
• Remove Ads (a one-time purchase) turns off the ads between levels and the banner. Reward videos stay available, and stay your choice.

Ad partners use the data they receive under their own privacy policies, including to prevent ad fraud and to measure ads. The full list of ad partners active in a game is shown in the consent form (EU/UK) and is available from us on request.

In short: only the companies that make the game work, each listed here with a link to its own policy. We never sell your data for money.

If we add an ad network or another partner, we add it to this list and update the date at the top before it goes live in a game.

We may also disclose data if the law requires it (for example a valid court order), to protect players, us or others from fraud or harm, or if the games move to a company we own or to a new owner (for example if we form a company to publish them), who must then keep this policy's promises.

We are based in the United States, and our partners process data in the United States and other countries. When data about players in the EU/EEA, UK or Switzerland is transferred, our partners rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where they are certified, or on the European Commission's Standard Contractual Clauses (and the UK addendum).

In short: most choices are a switch in the game. For anything else, write to us. We answer within 30 days, and it never costs you anything.

In the game

• Settings → Privacy & purchases → Share gameplay stats: turn statistics and crash reports on or off.
• Settings → Privacy & purchases → Ad privacy choices (EU/EEA, UK, Switzerland) or → Do not sell or share my info (US).
• iPhone Settings → Privacy & Security → Tracking: allow or stop ad tracking.
• Settings → Privacy & purchases → Your support code: a short code made at random on your phone the first time you open the game, with a Copy button. It is not your advertising ID and is not made from it. Quote it when you write to us to see or delete your data; it is the ID your purchase record is kept under, and the ID your gameplay statistics and crash reports carry while Share gameplay stats is on.
• Delete the app to delete everything stored on your phone. A reinstall starts with new random IDs (and a new support code).

Everyone

Wherever you live, you can ask us to tell you what data we hold linked to your install, give you a copy, correct it, delete it, or stop using it. Because there are no accounts, we have no name or email to search by: quote your support code (Settings → Privacy & purchases → Your support code) and the game's name, and we will explain what we can find and delete (for example the RevenueCat purchase record kept under that code, and the gameplay statistics and crash reports tagged with it). If the game is already deleted, tell us which game and roughly when you installed it, and we will do our best. We may ask for details that show the data is yours, and never more than we need.

EU/EEA, UK and Switzerland

You have the rights to access, rectification, erasure, restriction, data portability, to object (including to processing based on legitimate interests), and to withdraw consent at any time without affecting earlier processing. You can also complain to your local data protection authority (in the UK, the ICO). We answer within one month.

California and other US states

California (CCPA/CPRA) and a growing number of other states (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others) give residents the right to know, access, correct and delete personal information, to get a copy, to opt out of its "sale" or "sharing" for targeted advertising, and not to be treated differently for using these rights.

Sources: your device and Apple. Purposes and retention: sections 3 and 6. To make a request, use the switches above or write to us; you may use an authorized agent, and we may ask the agent for proof of authority. We answer within 45 days. If we turn down a request, you can appeal by replying to our answer; we will reply to an appeal within 45 days, and if you are not satisfied you can contact your state attorney general. The games cannot read browser "Global Privacy Control" signals; use the in-game switch instead. This website does no tracking, so there is nothing to opt out of here.

In short: our games are rated 13+ and are not made for children under 13.

Cuddle Shop is rated 13+ on the App Store and is not directed to children under 13. We do not knowingly collect personal information from children under 13, and we do not ask for any information that identifies a person. In line with the US Children's Online Privacy Protection Act (COPPA), if we learn that we have collected personal information from a child under 13 (or under the higher age that applies where they live), we will delete it, and we will make sure that install gets only non-personalized ads with no tracking.

Parents: if you think your child has used Cuddle Shop and data was collected, write to us and we will delete it. You can also block purchases and limit ad tracking with Apple's Screen Time and Ask to Buy.

We keep the data we collect small on purpose: no names, no accounts, no messages. Data travels over encrypted connections (HTTPS) to our partners, and only we can reach the partner dashboards that hold it. No system is perfectly secure, but if we ever learn of a breach that affects you, we will act quickly and tell you and the authorities where the law requires.

If this policy changes, we update the "Last updated" date at the top. For important changes (for example a new kind of data or a new purpose), we tell you in the game before the change applies, and where the law requires we ask for your consent again.