Legal · Privacy
Privacy Policy
01 What Do These Terms Mean?
- Application
- Flower Shop Sort — the mobile sorting-puzzle game we provide
- Company
- The entity operating Flower Shop Sort, referred to throughout as "we," "us," or "our"
- Personal Data
- Any information that identifies, or can reasonably be used to identify, a living individual
- Usage Data
- Data generated automatically as you interact with the app — session lengths, feature clicks, error events
- Device
- Any smartphone, tablet, or other hardware used to run Flower Shop Sort
- Service Provider
- A third-party partner that processes data on our behalf under a contractual Data Processing Agreement
- Advertising Identifier
- A resettable, non-permanent ID assigned by your operating system for advertising purposes (GAID on Android; IDFA on iOS)
- You / User
- The individual who downloads or uses Flower Shop Sort
02 What Information Do We Collect?
Automatically Recorded Data
Our systems capture the following technical signals every session — no action required on your part:
- Network identifiers — IP address, connection type (Wi-Fi / cellular)
- Device details — hardware model, operating system version, screen resolution
- Mobile identifiers — GAID, ANDROID_ID, and unique device ID
- Session telemetry — levels played, time per puzzle, feature interactions, session duration
- Diagnostics — crash logs, error stack traces, and performance benchmarks
- Carrier info — mobile network operator name (for connectivity optimization)
Data You Provide Directly
We collect the following only when you explicitly share it:
- PayPal account details (email address and display name) — collected solely to process prize withdrawals; never stored beyond the transaction window
- In-app preferences — sound settings, notification choices, accessibility options
- Support messages — text you submit via our help channel
We do not collect your real name, postal address, phone number, or precise GPS location. Advertising IDs can be reset or disabled at any time through your device's privacy settings.
03 How Is Your Data Used?
Each category of data we collect has a specific, documented purpose:
| Purpose | Data Involved |
|---|---|
| Service operation — running servers, syncing puzzle progress, maintaining uptime | Usage Data, Device Info, Identifiers |
| Account management — authentication, preferences, session continuity | Identifiers, Usage Data |
| PayPal payouts — fulfilling prize withdrawal requests securely | PayPal email, display name |
| Customer support — responding to help tickets and resolving issues | Support messages, Diagnostics |
| Communications — product updates and opt-in push notifications | Device token, Identifiers |
| Analytics & improvement — studying gameplay data to fix bugs and build features | Usage Data, Diagnostics |
| Advertising — serving relevant ads via our ad network | Advertising Identifiers, Device Info |
| Legal compliance — meeting applicable regulatory obligations | As required by law |
| Business transitions — supporting potential mergers or restructuring | Aggregate account data |
05 Who Else Is Involved?
Advertising Mediation
In-app advertising is delivered through the AppLovin mediation platform. Data shared with advertising partners is strictly limited and never includes sensitive personal information.
Shared with Ad Partners
- Advertising IDs (user-resettable)
- Device model, OS, screen size
- Session frequency and duration
- Ad impression and click events
- Country code and language preference
Never Shared
- Email address or phone number
- PayPal credentials
- Puzzle progress or game history
- Support conversation content
- Precise GPS location
Ad Partner Privacy Policies
| Partner | Privacy Policy |
|---|---|
| AppLovin | applovin.com/privacy |
| Chartboost | chartboost.com/legal/privacy-policy |
| policies.google.com/privacy | |
| InMobi | inmobi.com/privacy-policy |
| IronSource | ironsource mobile privacy policy |
| Kwai Network | kwai.com/legal |
| Fyber | fyber.com/privacy-policy |
| Mintegral | mintegral.com/en/privacy |
| Moloco | moloco.com/privacy-policy |
| Bytedance (Pangle) | pangleglobal.com/privacy |
| Vungle / Liftoff | vungle.com/privacy |
| Unity Ads | unity3d.com/legal/privacy-policy |
| Yandex | yandex.com/legal/confidential |
| BidMachine | bidmachine.io/docs |
| Verve | verve.com/privacy-policy |
| Bigo | bigo.tv/policy |
06 Why Does the App Need Permissions?
Flower Shop Sort requests only the system permissions required to deliver its features. Every permission is disclosed before installation:
| Permission | Purpose | Data Involved |
|---|---|---|
INTERNET | Connect to game servers, ad networks, and update services | Network traffic |
ACCESS_NETWORK_STATE | Detect network availability and optimize data loading | Connection type, status |
ACCESS_WIFI_STATE | Identify Wi-Fi for stable connections | Wi-Fi status, signal |
AD_ID | Deliver personalized in-app advertising | Resettable ad identifier |
VIBRATE | Haptic feedback when sorting flowers | None |
ACCESS_ADSERVICES_TOPICS | Privacy Sandbox topic-based ad signals | Interest category signals |
ACCESS_ADSERVICES_ATTRIBUTION | Measure ad campaign effectiveness | Attribution metrics (no PII) |
BIND_GET_INSTALL_REFERRER_SERVICE | Identify app install source | Install referrer, campaign ID |
BIND_APPHUB_SERVICE | Optimize ad delivery via AppHub | Ad parameters, impressions |
ACCESS_ADSERVICES_AD_ID | Comply with Android Privacy Sandbox ad ID API | Ad service identifiers |
FOREGROUND_SERVICE | Maintain critical game tasks when app is backgrounded | None |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Secure internal broadcast communication | None |
07 What About Children?
If you are a parent or guardian and believe your child has submitted personal information to us without your consent, please email twilightwhisperenigma@gmail.com immediately. We will investigate and permanently delete the data without delay.
Note for EEA users: the minimum age threshold may be up to 16 in certain Member States. We comply with all applicable jurisdiction-specific age requirements.
08 Where Does Your Data Go?
Primary Server & Analytics Endpoint
Flower Shop Sort routes gameplay data and analytics to our primary infrastructure at:
https://uvpjt.fssort.com/
This endpoint handles puzzle progress synchronization, server-side level validation, leaderboard updates, and crash reporting. The analytics layer processes fully anonymized, aggregated usage metrics — no personally identifiable information is retained in analytics storage.
Endpoint Security Measures
- All connections are encrypted with TLS 1.2 or higher
- Role-based access controls restrict data access to authorized engineering staff only
- Data minimization is enforced at every processing stage
- Regular penetration tests and vulnerability scans are conducted on all endpoints
- Data Processing Agreements (DPAs) are in place with every third-party data handler
09 What Rights Do You Have?
Multiple privacy frameworks protect you depending on your location. We honor every valid request promptly.
GDPR
- Access your data
- Correct inaccuracies
- Erasure (right to be forgotten)
- Restrict processing
- Object to processing
- Data portability
- Lodge a complaint with a supervisory authority
CCPA / CPRA
- Know what data is collected & shared
- Delete personal information
- Correct inaccurate data
- Opt out of sale / sharing
- Limit use of sensitive PI
- Non-discrimination for exercising rights
VCDPA
- Access & confirm processing
- Correct personal data
- Delete personal data
- Data portability
- Opt out of targeted advertising & profiling
- Appeal our decisions
To exercise any right, email twilightwhisperenigma@gmail.com with subject line "Privacy Rights Request". We will verify your identity and respond within the timeframe required by your local law (typically 30–45 days).
10 Is Your Data Safe?
We apply a layered approach to security:
Technical Safeguards
- TLS 1.2+ for all data in transit
- Encryption at rest for stored personal data
- Automated anomaly and intrusion detection
- Scheduled security audits
Organizational Safeguards
- Role-based access controls (least-privilege)
- Employee privacy and security training
- Contractual security standards for all vendors
- Documented incident response procedures
No electronic storage or internet transmission is 100% secure. We use commercially reasonable measures and encourage you to report any suspected security issues to twilightwhisperenigma@gmail.com.
11 How Long Do We Store Your Data?
We follow a data minimalism policy — personal data is retained only as long as it is needed:
- Active data is retained only for the duration required to fulfill the purposes in this policy
- Aggregated, fully anonymized usage data may be retained longer for product development
- Upon receiving a verified deletion request, we purge your data within the timeframe required by applicable law
- Backup copies are purged on their normal rotation schedule, typically within 30 days of deletion
12 What About Cross-Border Data Transfers?
Flower Shop Sort operates globally. Your data may be transferred to and processed on servers located in countries other than your country of residence — which may have different data protection standards.
In all cases, we ensure equivalent protection through:
- TLS 1.2+ encryption for all data in transit across borders
- Standard Contractual Clauses (SCCs) or equivalent contractual safeguards for transfers from the EEA or UK
- Careful vetting of hosting and processing partners to ensure they meet our minimum security standards
13 How Can You Opt Out?
Advertising Personalization
Disable personalized advertising directly on your device — no account login required:
- Android 12+: Settings → Privacy → Ads → "Delete advertising ID"
- Android (earlier): Settings → Google → Ads → "Opt out of Ads Personalization"
- iOS: Settings → Privacy & Security → Tracking → disable "Allow Apps to Request to Track"; Settings → Privacy & Security → Apple Advertising → disable "Personalized Ads"
Do Not Sell / Share My Data
To opt out of the sale or sharing of your personal data for cross-context behavioral advertising (as defined under CCPA/CPRA), email twilightwhisperenigma@gmail.com with the subject line "Do Not Sell My Data". We will process your request within 15 business days.
Marketing & Push Notifications
Unsubscribe from promotional emails via the link in any message we send. Disable push notifications in your device's app settings (Settings → Notifications → Flower Shop Sort).
14 When Are We Required to Disclose?
- Business Transactions
- If Flower Shop Sort is involved in a merger, acquisition, financing, or sale of assets, your Personal Data may be transferred as part of that transaction. We will notify you before your data becomes subject to a materially different privacy policy.
- Legal Compliance
- We may disclose your data in response to a valid court order, subpoena, government request, or other legally required process. We share the minimum amount of data necessary.
- Protection of Rights & Safety
- We may disclose data to prevent fraud, enforce our Terms of Service, protect our legal rights, or safeguard the safety of our users and the public.
16 California Shine the Light
Under California Civil Code § 1798.83 ("Shine the Light"), California residents who have an established business relationship with us may request a list of the categories of personal information we disclosed to third parties for their direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties.
To make a Shine the Light request, email twilightwhisperenigma@gmail.com with the subject line "California Shine the Light Request". Please include your name, mailing address, and email address in the request. We will respond within 30 days.
We do not sell personal information to third parties for their own direct marketing purposes. If this practice changes, we will update this section and provide required notices.
17 Will This Policy Change?
We may revise this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law.
- The updated policy will be posted at this URL with a new "Effective" date
- For material changes that meaningfully affect your rights or our data handling, we will notify you via email or a prominent in-app notice at least 7 days before the change takes effect
- Your continued use of Flower Shop Sort after the effective date constitutes acceptance of the revised policy
- If you disagree with a change, you may stop using the app and request deletion of your data before it takes effect
18 How to Reach Us
Have a question, a rights request, or a privacy concern? We're here to help.
Privacy Inquiries — Flower Shop Sort
twilightwhisperenigma@gmail.comIn-App: Settings → Help & Support
We aim to respond to all privacy inquiries within 48 hours and to resolve data rights requests within the timeframe set by your local law.