Privacy Policy

This policy applies to StackJack 2.0 and later and to this website. It takes effect when StackJack 2.0 is released on the App Store.

Contents

1. Who we are
2. What stays on your device
3. Play statistics and crash reports
4. Feedback you send
5. Game Center and purchases
6. Duels, challenge codes and sharing
7. Advertising
8. This website
9. Emailing us
10. How we use data and our legal bases
11. Who processes data for us
12. How long we keep data
13. Children's privacy
14. Your rights and choices
15. Notice for U.S. state residents
16. International transfers
17. Security
18. Changes to this policy
19. Contact

1. Who we are

StackJack and stackjack.app are published by Lost Island Entertainment, Inc., a Wyoming corporation ("Lost Island", "we", "us"). We are the controller of the personal data described here. Contact: privacy@stackjack.app or Lost Island Entertainment, Inc., 1621 Central Ave., Cheyenne, WY 82001, USA.

2. What stays on your device

StackJack has no accounts and no sign-up. Your level, Atoms, statistics, achievements, Daily Deal results, streaks, cosmetics and settings are stored only on your device (and in your device backups, which Apple's policies govern). We don't receive them.

If you turn on the optional Daily Deal reminder, the notification is scheduled on your device. No push notification service or token is involved.

3. Play statistics and crash reports

StackJack has two levels of statistics sharing. Both can be switched on or off at any time in Settings › Privacy & feedback, and the game works the same either way.

Basic statistics and crash reports (anonymous)

Once per day you play, the app can send one anonymous summary of that day: number of sessions and minutes played; games started and finished per mode; rounds played, passed and missed; busts, perfect rounds and new bests; whether you played the Daily Deal; ads shown and purchases started or completed (never payment details); shares and feedback sent; plus app version and build, platform, OS major version and country setting. It can also send crash, hang and performance reports from Apple's MetricKit and a note when the app closed unexpectedly.

These records carry no identifier of any kind — no account, install ID, session ID, advertising ID or device serial — and are sent without signing in. To measure whether players come back, each summary includes only the week the app was installed and how many days ago that was. Because nothing links two records to the same person or device, we can't connect them to you, and we can't find or delete an individual's records.

Where basic statistics are on by default. Only where the law allows this with notice: currently the United States and its territories, Australia, New Zealand, Japan, Singapore, Hong Kong and Taiwan, and only when both your device's region and your App Store country are in that list. You'll see a notice the first time, and you can turn it off. Everywhere else — including the European Economic Area, the United Kingdom and Switzerland, and whenever the region is unknown — nothing is sent until you choose to share.

Detailed play statistics (only if you opt in)

If you choose to share detailed statistics, the app also sends how each round and game goes (scores, timings, busts, passes, Gadgets and perks chosen), screens visited, purchase and ad outcomes (never payment details), and your device model, OS version, language, region setting and time-zone offset. These records are tied to a random ID created by the app for this installation. It is not your name, Apple Account, email address, advertising identifier or device serial. We don't combine it with anything that identifies you, and we don't use it for advertising or tracking.

"About you" (optional)

If you share detailed statistics, you can also tell us an age band, gender, how often you play card games and how you found StackJack. Every question has "Prefer not to say", and nothing is sent unless you answer and share detailed statistics.

Before you decide, and offline

Until you decide, records wait on your device; if you say no, they're deleted. Without a connection, records wait on the device (up to about 8 MB) and are sent later.

Deleting your shared data

Settings › Privacy & feedback › Delete my shared data turns detailed sharing off and erases everything this installation sent under its random ID: detailed statistics, "About you" answers, linked crash reports and feedback. Your game progress on your device is not affected.

4. Feedback you send

The in-app feedback form sends your rating, the category you choose and your message, together with the app version, build and device model, and — if you leave the box ticked — details of your current or last game (mode, round, score and Gadgets). It is sent even if you don't share statistics, because you're sending it on purpose. Adding an email address is optional; we use it only to reply to you.

5. Game Center and purchases

Game Center is optional. If you sign in, your scores and achievements are sent to Apple to show leaderboards. Apple's privacy policy applies, and your Game Center settings control who can see your profile. We receive leaderboard entries as Apple provides them to all developers.

Purchases (StackJack Plus and Plus Collector's) are processed by Apple. We receive confirmation that a purchase happened and, to unlock Plus for buyers of the original StackJack, the app checks your App Store receipt on your device. We never receive your name, address or payment details.

Apple may also provide us aggregated App Store analytics (such as downloads by country) and crash reports from people who chose to share them with developers in their device settings.

6. Duels, challenge codes and sharing

Local Duels connect directly between devices on the same Wi-Fi network using Apple's Bonjour. While you host a Duel, your device's name is visible to other devices on that network looking for a game; you can rename your device in its settings. Duel moves travel directly between the two devices and never through our servers. iOS and macOS ask your permission before StackJack can find devices on your local network.

Challenge codes and share images contain only the game mode, deck seed and score. They're created on your device and go wherever you choose to share them.

7. Advertising

This version of StackJack contains no third-party advertising SDK and shows no third-party ads, and it doesn't request permission to track you (App Tracking Transparency). If we add advertising in a future version, we will update this policy and the App Store privacy label first, show ads only between games, use only contextual (non-personalized) ads for anyone who tells us they are under 13 or for whom we lack required consent, ask for consent where the law requires it, and honor opt-outs including Global Privacy Control where applicable.

8. This website (stackjack.app)

• No cookies, no local storage, no forms. The site doesn't set cookies or store anything on your device, and it has no sign-up or contact forms. Links to lostisland.com and the App Store take you to sites with their own privacy policies.
• Server logs. Our web server, hosted by DigitalOcean in the United States, records each request's IP address, time, page, referring page and browser type. We use these logs only to keep the site running and secure, and they are deleted automatically after 14 days.
• Privacy-friendly page analytics. To learn which pages are useful, the site sends a page-view event (page path, the referring site's domain, screen width, language and any campaign tags in the link) and clicks on a few buttons to PostHog, our analytics provider, through a relay on our own server. The relay doesn't pass on your IP address, location lookup is disabled, and each page view gets a throwaway random number held only in memory, so page views can't be linked to each other or to you. If your browser sends Global Privacy Control or Do Not Track, no analytics are sent at all.
• Everything is self-hosted. Fonts, images and scripts are served from stackjack.app itself; we don't load third-party embeds, social widgets or advertising.
• DNS. Cloudflare provides DNS for the domain. Web traffic goes directly to our server, not through Cloudflare.

9. Emailing us

If you email support@, privacy@, press@ or legal@stackjack.app, the message is forwarded by Cloudflare's email routing service to our team's mailbox. We use your email address and message only to respond and keep a record of the conversation.

10. How we use data and our legal bases

We don't sell personal data, share it for cross-context behavioral advertising, use it for profiling with legal or similarly significant effects, or make automated decisions about you. We will disclose information if the law requires it or to protect the rights, safety or property of our players, the public or us.

11. Who processes data for us

• Supabase (United States): stores statistics, crash reports and feedback, in a database operated for us by our affiliate SynthOps LLC.
• PostHog (United States): website page analytics without identifiers.
• DigitalOcean (United States): hosts this website.
• Cloudflare (global): DNS and forwarding of email sent to stackjack.app addresses.
• Our email provider: stores emails you send us.
• Apple: App Store distribution, purchases, Game Center and the crash diagnostics it provides to developers, under Apple's own privacy policy.

These providers may process data only on our instructions and to provide their service to us.

12. How long we keep data

• Basic and detailed statistics: about 13 months.
• Crash and performance reports: 6 months.
• Feedback (and any reply email in it): 2 years after the conversation ends.
• Emails to us: as long as needed to handle your request and for up to 2 years afterwards.
• Website server logs: 14 days.
• Website analytics: these events contain no identifier; we keep them only as long as they're useful for planning the site.

13. Children's privacy

StackJack is designed for players aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13 in a way that requires parental consent under the U.S. Children's Online Privacy Protection Act (COPPA) or similar laws. The game has no accounts, no chat and no way to talk to strangers.

• If a player tells us in "About you" that they're under 13, the app never sends detailed statistics or "About you" answers — that answer stays on the device.
• In regions where basic statistics are on by default, an under-13 player's device may still send the anonymous basic summary and crash reports described above. These contain no identifier and no information that identifies a child, and are used only to keep the game working (support for internal operations). Everywhere else, nothing at all is sent for a player who says they're under 13.
• We ask players under 13 not to include an email address in feedback. If we learn that we've received personal information from a child under 13 without parental consent, we will delete it.

If you're a parent or guardian and think your child has sent us personal information, email privacy@stackjack.app and we'll delete it. See also our page for parents.

Teens. We don't sell or share the personal information of anyone, including players under 16 or 18, and we don't use it for targeted advertising.

14. Your rights and choices

In the app: switch basic or detailed statistics off at any time, and use Delete my shared data to erase what your installation sent under its random ID.

By law, depending on where you live, you may have the right to know what personal data we hold about you and get a copy, to correct it, to delete it, to restrict or object to its use, to data portability, and to withdraw consent at any time (without affecting earlier processing). In the EEA, UK and Switzerland you may complain to your data protection authority; Brazilian residents may contact the ANPD.

To make a request, email privacy@stackjack.app. Because we deliberately avoid identifiers, the quickest way to delete detailed statistics is the Delete my shared data button in the app; by email, we'll need details such as the email address you used in feedback to find your data. Anonymous basic statistics cannot be linked to anyone, so there is nothing we can retrieve for them. We'll respond within the time the law requires (generally 30 to 45 days), and we won't treat you differently for using your rights.

15. Notice for U.S. state residents

This notice supplements the policy for residents of California and other U.S. states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others).

• Categories collected in the last 12 months: identifiers (a random install ID if you opt in to detailed statistics; an email address if you include one in feedback or email us; IP addresses in website logs), internet or electronic network activity (gameplay statistics and website page views), and inferences we draw only in aggregate. Optional "About you" answers include age band and gender; we don't use them to infer characteristics about you.
• Sources: you and your device.
• Purposes: those in section 10.
• Disclosures: to the service providers in section 11, for business purposes only.
• Sale and sharing: we do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the last 12 months. We honor Global Privacy Control as an opt-out signal on this website.
• Sensitive personal information: we don't collect it for the purpose of inferring characteristics.
• Your rights: to know, access, correct, delete, opt out of sale, sharing, targeted advertising and profiling, and not to be discriminated against. You may use an authorized agent; we may ask the agent for proof of authority. If we decline your request, you can appeal by replying to our decision; if your appeal is denied, you may contact your state attorney general.

16. International transfers

We are based in the United States and our providers store data there. When we transfer personal data from the EEA, UK or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents) or a provider's certification under the EU–U.S. Data Privacy Framework.

17. Security

Data is encrypted in transit (HTTPS/TLS). Statistics are stored in a database with access limited to our team, and each installation can write only its own records. We keep as little data as we can — the best protection is not having it.

18. Changes to this policy

We'll update this page and the "Last updated" date when our practices change. If a change is significant — for example, adding advertising — we'll also tell you in the app before it takes effect and ask for consent where required.

19. Contact

Lost Island Entertainment, Inc. · 1621 Central Ave., Cheyenne, WY 82001, USA · privacy@stackjack.app

Also available in Español and Português. If translations differ, the English version applies to the extent the law allows.