Privacy Policy for Goods Shelf Stack

Last updated: December 30, 2025

Your privacy preferences are our top priority, and we will consistently refer to you as "you" throughout this document. This privacy policy has been carefully formulated to provide a comprehensive yet easy-to-understand explanation of how your personal information is collected, stored, and used when you interact with our game¡ªhereinafter uniformly referred to as the "Application." We strongly recommend that you read this policy thoroughly to fully understand our privacy values and operational practices. By opening the Application or using any of our services, you acknowledge and agree to the terms outlined in this privacy policy.

Information Collection and Usage

1. In-Game Activity Data

We collect various data points related to your in-game interactions. This includes, but is not limited to, your click count, the landing pages and content you browse, app launch history, permission settings, feature performance metrics, the number of applications installed on your device, app package names, device brand, network connection status, firebase_device_id, device model, country of SIM card issuance, system language, and advertiser-accessible cookies. All such information is shared exclusively with verified third-party analytics platforms: Firebase, Facebook Analytics, and our internal data statistics system (ECS).

2. Device-Specific Information

To enhance your app experience, we collect details about your device and network connection. The specific information collected varies depending on factors such as how you interact with the app, your privacy settings, and the features you use. This may include SDK/API version, platform type, timestamps, app identifier and version, unique device ID, manufacturer, operating system version, language, time zone, and network status (e.g., Wi-Fi). We also monitor the app¡¯s listing status on Google Play, ad-loading methods, advertising platforms, and ad delivery IDs. Data collected via your device¡¯s Android ID is stored to track in-app advertising-related activities, and this data is classified as personal information.

3. Advertising-Related Data

Your Android advertising identifier is used to deliver personalized advertisements, and this identifier is solely for advertising and analytics purposes. It should be noted that this identifier does not contain sensitive information that can be used to personally identify you or link to your personal details. Furthermore, it is not associated with permanent device identifiers such as SSAID, MAC address, or IMEI.

4. Network-Connected Information

When you access the internet while playing the game, we collect information about your network type (e.g., Wi-Fi or mobile data) and IP address. This information is essential for ensuring the stable operation of the game¡¯s network connections.

5. Third-Party Monetization and Analytics Data

Third-party Software Development Kits (SDKs) integrated into our applications may access certain user information, including:

l  Google AD ID: Used within Google's advertising ecosystem.

l  Device data: Such as device type, technical specifications, and the country where services are used.

l  Fraud-prevention data: To detect click fraud and protect the integrity of the advertising system.

l  Demographic data: Derived from IP address analysis, providing insights into location-based patterns.

l  Advertising, marketing, and analytics data: Used by third-party SDKs to optimize marketing campaigns, conduct research, and analyze user behavior.

l  Advertiser-accessible cookies: Stored on your device or retrievable by advertisers.

The data collected by these SDKs is governed by the respective privacy policies of their providers. Third parties include monetization partners (e.g., Google Admob, Facebook Audience Network, IronSource) and analytics tools (e.g., Firebase, Facebook Analytics, our internal systems). Links to their privacy policies are provided in the "Privacy Policies of Third-Party Partners" section for your reference.

Legal Bases for Personal Data Processing

Our management of your personal data strictly complies with the objectives set out in this policy, and such processing activities are based on the following legal frameworks:

1. Contractual Necessity

Processing your personal information is often a prerequisite for us to fulfill our contractual obligations to you. This allows us to provide the services you have requested and verify your identity¡ªfor example, processing your registration details to grant you access to our platform and its features.

2. Statutory Obligations

We process data to comply with applicable laws and regulatory requirements. Examples include maintaining financial records that meet accounting standards, or disclosing information to law enforcement authorities when required by legal provisions.

3. Legitimate Business Interests

We process data to foster our relationship with you (such as sending service-related updates), enhance the security of our offerings, and share product information. These efforts enable us to improve our services based on user feedback and enhance the overall user experience.

4. Explicit User Consent

In specific cases, we only process your data with your explicit permission¡ªfor example, placing non-essential cookies or sharing information to support targeted advertising. It should be noted that certain services or functional features may rely on such authorized data processing to operate as intended.

Approaches to Information Collection

1. Automated In-Game Data Capture

When you launch the game, its built-in systems will automatically collect the aforementioned information. This process strictly adheres to the terms of this policy and all relevant legal regulations to ensure compliance.

2. Data from Third-Party Platforms

If you obtain the game through a third-party distribution platform (e.g., Google Play Store), we may receive limited sets of information¡ªincluding device identifiers and download records. Such data transmission is conducted in accordance with the privacy policies of the respective platforms and applicable legal provisions.

Information Security and Protection Measures

We prioritize the security of your personal information and implement robust safeguards such as data encryption to prevent risks including loss, theft, unauthorized access, disclosure, alteration, or destruction. Encryption protocols are applied both during data storage and transmission to ensure the integrity of information during network transfers.

Strict access control policies are enforced to restrict data access and processing rights exclusively to authorized personnel. Detailed access logs are maintained, and regular audits are conducted to monitor compliance. In addition, our game systems and servers undergo routine security assessments to identify and address vulnerabilities, effectively protecting against threats such as hacking attempts and malware intrusions.

Your Rights

1. Right to Withdraw Consent

At any time, you have the right to withdraw your consent for data processing activities that depend on your prior permission. This withdrawal will not render unlawful any data processing that was legally conducted before the consent was revoked, nor will it affect actions taken by third parties prior to the withdrawal of your consent.

2. Right to Access and Modify

Pursuant to applicable laws, you are entitled to access the personal information we hold about you and make corrections as needed.

3. Right to Obtain and Rectify Information

Upon your formal request, we will provide you with a free copy of your personal information in our possession¡ªunless relevant laws explicitly allow us to charge a reasonable fee for this service. Access to your information may be restricted if granting such access would infringe on the legitimate rights and interests of other individuals. Furthermore, if you are unable to directly update inaccurate personal information through our service channels, you may submit a request for us to correct such information.

4. Right to Request Erasure

You may request the deletion of your personal data in the following circumstances:

l  The data is no longer needed to fulfill the original purpose for which it was collected;

l  The data processing was based on consent that you have since withdrawn;

l  You have objected to the data processing, and we lack compelling legitimate grounds to continue such processing.

5. Right to Restrict Processing

You may request to restrict the processing of your data in scenarios including, but not limited to:

l  You challenge the accuracy of the data being processed (processing will be restricted during the verification period, which may temporarily affect your access to our services);

l  You oppose illegal data processing and request restriction of processing as an alternative to full data deletion;

l  You need the data for the purpose of pursuing legal claims after we no longer need it for our original purposes, or during the period when we are evaluating whether our legitimate interests outweigh your objections.

Data subject to processing restrictions will only be processed with your explicit consent, for the purpose of pursuing legal claims, to protect the rights of third parties, or for reasons related to public interest. We will promptly notify you when any such restrictions are lifted.

6. Right to Object to Processing

If your personal data is being processed based on your consent, a contractual agreement, or our legitimate business interests, you have the right to object in accordance with applicable laws. We may only continue processing your data if such processing is necessary for pursuing legal claims or is expressly permitted by law.

7. Notification Obligations to Third Parties

When we have shared your personal data with third parties, we will inform those parties of any requests you make regarding the correction, deletion, or restriction of your data¡ªunless fulfilling such a notification requirement is technically impracticable or excessively burdensome. Upon your request, we will also disclose the identities of these third-party data recipients.

8. Right Concerning Automated Decision-Making

Except in cases where legal exemptions apply, you have the right to avoid decisions that are based solely on automated processing (including profiling) and that could have legal consequences or significant impacts on you personally.

9. Right to Data Portability

If your personal data is processed based on a contractual agreement, your consent, or automated means, you may request that we provide your data in a structured, machine-readable format. If technically feasible and without prejudicing the rights of others, we will directly transfer your data to another data controller as requested.

10. Right to Lodge a Complaint

If you believe that your privacy rights have been violated, please contact us at robiulislam1364@gmail.com, and we will strive to resolve the issue promptly. Additionally, you have the right to file a complaint with the relevant supervisory authority in your country of residence, country of employment, or the country where the alleged violation is believed to have occurred.

California Privacy Rights

California residents are entitled to additional privacy protections under the California Consumer Privacy Act (CCPA), which are detailed below. To exercise these CCPA-specific rights, please refer to the subsequent section titled ¡°Exercising Your California Privacy Rights.¡± If you are not a resident of California, this section does not apply to you¡ªwe advise you to refer to our primary Privacy Statement instead.

1. Right to Disclosure and Information Access

You have the right to obtain details about, and access to, the personal information we have collected about you over the preceding 12-month period. This includes the following:

l  The specific categories of data we have collected about you;

l  The sources from which this information was obtained;

l  The business-related objectives behind the collection of your data;

l  The specific pieces of information we have accumulated about you.

2. Right to Request Data Deletion

You may submit a request for the deletion of personal information we have collected from you. Upon receiving such a request, we will not only delete the data ourselves but also instruct our service providers to do the same. However, exceptions apply if we or third parties need the data for the following purposes:

l  Providing the services you have explicitly requested;

l  Addressing and correcting system errors;

l  Complying with the California Electronic Communications Privacy Act (as outlined in California Penal Code Sections 1546 and subsequent provisions);

l  Conducting public or peer-reviewed scientific, historical, or statistical research that advances the public good and complies with ethical standards and privacy regulations;

l  Fulfilling legal obligations, or in similar legally required scenarios.

3. Data Retention Protocols

We may retain your personal data for an extended period if you have provided your consent and not subsequently withdrawn it. Furthermore, longer retention periods may be necessary to meet legal obligations or comply with official directives. If the game ceases operations, all personal data in our possession will be permanently deleted from our systems.

4. Processing of Your Requests

Our goal is to respond to all verifiable consumer requests within 45 days of receipt. If circumstances require an extension (which may be up to 90 days in total), we will notify you via email, telephone, or other electronic communication methods and provide a clear explanation for the delay. Typically, we do not charge fees for processing or responding to such requests. However, if a request is deemed excessive, repetitive, or clearly without merit, we reserve the right to impose a reasonable fee. Before proceeding with any fee-based processing, we will first explain the rationale for our decision and provide you with a detailed cost estimate.

5. Non-Discrimination Commitment

Exercising your rights under the CCPA will not result in any form of unfair treatment from us. This means we will not deny you service, charge you discriminatory prices or rates, or provide you with lower-quality or inconsistent service levels based on your exercise of these rights. Your CCPA protections do not alter the terms of service to which you have agreed.

6. Notice on Minors' Data Collection

Our services are not designed for, nor intended for use by, individuals under the age of 13. We do not knowingly collect personal information from children in this age group. If we become aware that we have collected such data, we will immediately delete it from our servers. Parents or legal guardians who discover that their child under 13 has shared personal information with us should contact us promptly to initiate the removal process. For users between the ages of 13 and 16, explicit opt-in consent is required to use our services. Parents or legal guardians of these users may also contact us with any concerns regarding their child¡¯s data.

Rights of EU and UK Residents

Individuals residing in the United Kingdom or any member state of the European Union are granted specific privacy rights under EU data protection regulations. These rights are detailed below:

l  Right to Verify Processing and Seek Clarification: You may request written confirmation as to whether we are processing your personal data, as well as comprehensive details about the specific information we hold about you.

l  Right to Review and Amend Data: You have the authority to examine the accuracy of your personal data and update it as necessary, ensuring that the information maintained in our systems remains current and correct.

l  Right to Request Erasure: If you wish for us to no longer retain your personal data, you have the right to demand its deletion, which will result in the removal of such information from our databases.

l  Right to Restrict Processing: If we lack a lawful basis for continuing to process some or all of your data, you may ask us to cease such activities, thereby preventing unauthorized use of your information.

l  Right to Data Portability: You may obtain a copy of the personal data you have provided to us in a machine-readable format, which facilitates the easy transfer or independent management of your information.

To exercise any of these rights, please send an email to robiulislam1364@gmail.com. We commit to responding to your request within one calendar month. If you believe we are not complying with applicable data protection laws, you also have the right to file a complaint with your local data protection authority.

Third-Party Privacy Policy Links

Our privacy policy includes links to the privacy statements of our third-party partners. It should be noted that these policies are independently managed and are beyond our control. These documents explain how third-party entities collect, use, and share user data, and we strongly recommend that you review them thoroughly before engaging with their services. The relevant links are provided below:

l  Adjust: https://www.adjust.com/terms/privacy-policy/

l  Unity: https://unity3d.com/legal/privacy-policy

l  Pangle: https://www.pangleglobal.com/privacy

l  Mintegral: https://www.mintegral.com/en/privacy

l  Vungle: https://vungle.com/privacy/

l  Max/Applovin: https://www.applovin.com/privacy/

l  ironSource: https://www.is.com/privacy-policy/

Children's Privacy Protection

Protecting the privacy of children is a fundamental priority for us. We encourage parents and legal guardians to actively monitor their children¡¯s online interactions and activities. If you discover that your child has shared personal information with us without your prior authorization, please contact us immediately. Upon receiving such notification, we will take prompt action to permanently delete the relevant data from our records.

Revisions to the Privacy Policy

We may update this privacy policy from time to time to reflect changes in our business operations, technological advancements, or evolving legal requirements. Revised versions of the policy will be made available within the application or on its associated distribution platform. Whenever possible, we will notify you of these changes through reasonable communication channels (such as in-app notifications or email). After notification, we urge you to review the updated policy carefully. Your continued use of the game following the publication of revisions constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you may choose to discontinue using our services.

Contact Us

If you have any questions about this Privacy Policy, You can contact us: