This Privacy Policy applies to StackForge Studios games, our non-health studio apps, optional StackForge accounts used by those products, and stackforgestudios.com (together, the “Service”). It does not apply to PlateStack. JMB Assets LLC, doing business as StackForge Studios (“StackForge,” “we,” “us,” or “our”), controls the personal data described here.
Our baseline: we do not sell personal data, use it for targeted advertising, or include third-party advertising or attribution SDKs in our games. Our public website has no behavioral analytics or tracking cookies.
1. Products covered
This list may grow as new StackForge games or non-health apps launch. A product-specific notice controls if it clearly says that different terms apply.
2. Information we process
Accounts and support
- Optional account data: email address, display name, internal user identifier, authentication records, preferences, and purchase entitlement.
- Support data: messages, attachments, contact details, and the information needed to answer or investigate your request.
- Security data: limited IP address, device, session, timestamp, and error information reasonably needed to authenticate users, prevent abuse, and keep the Service working.
Game and app activity
- Local or cloud save state, boards, runs, scores, streaks, achievements, rankings, settings, and sync state.
- Friends, invitations, display names, reports, blocks, or other social activity when a product offers those features and you choose to use them.
- Purchase and subscription status received from Apple, Google, or RevenueCat. We do not receive your full payment-card number.
- Functional events needed to prevent duplicate rewards, enforce an entitlement, maintain a leaderboard, diagnose a failure, or secure the Service.
One Good Thing
Your completed good things, journal entries, and notes stay on your device and are not uploaded to StackForge. A StackForge account is optional and used only to let an eligible Play Pass follow you across supported apps. If you create one, we process the email address, internal user identifier, authentication records, and purchase or subscription status described above. RevenueCat receives the identifiers and store purchase information needed to verify and restore access; it does not receive your journal text.
Optional analytics
Where a game offers an analytics setting, analytics is off until you affirmatively opt in. An enabled integration may receive pseudonymous gameplay and interaction events, product and platform information, and a device or account identifier. It is not used for advertising. You can turn future collection off in that game’s settings.
Website delivery
stackforgestudios.com does not set tracking cookies or measure individual visitors, clicks, or scroll depth. Cloudflare Web Analytics measures aggregate page views and site performance without cookies, local storage, cross-site identifiers, or fingerprinting. Cloudflare and other infrastructure providers also process request data such as IP address, browser type, requested URL, timestamp, and security signals to deliver and protect the website.
3. Information our games do not request
Our covered games do not request Apple Health, Health Connect, nutrition, fitness, body, precise-location, contacts, camera, or microphone data unless a future feature clearly explains the permission before collection. Face ID or fingerprint checks are performed by your operating system; we receive only the result, not a biometric template.
4. Why we process information
- Provide requested gameplay, accounts, cloud sync, leaderboards, purchases, social features, and support.
- Apply settings, restore entitlements, and keep progress available across supported devices.
- Prevent fraud and abuse, investigate errors, protect accounts, and comply with law.
- Improve products using feedback, testing, deidentified or aggregated records, and optional analytics only after an affirmative opt-in.
5. Who receives information
We disclose only what is reasonably needed for a requested feature, security, legal duty, or user-directed interaction.
- Supabase and AWS: authentication, database, storage, real-time features, and infrastructure.
- RevenueCat, Apple, and Google: purchases, subscription status, entitlement, authentication, and store support.
- Expo: enabled update and push-notification delivery services.
- Cloudflare: website delivery, security, abuse prevention, and aggregate cookieless page-view and performance measurement.
- Optional analytics provider: pseudonymous game analytics only when configured and affirmatively enabled by the user.
- Other users: only the profile, score, ranking, invitation, or social information made available through a feature you choose to use.
- Legal or safety recipients: when reasonably necessary to comply with valid law, protect rights, prevent fraud, or address an imminent safety risk.
6. Retention and deletion
We keep account and product records while an account is active and for as long as reasonably needed to provide the Service, resolve disputes, secure the platform, and meet legal obligations. When you delete an account, account-linked personal data is targeted for deletion or deidentification from active systems within 30 days, subject to limited lawful retention. Protected backups expire on their normal schedule.
Deleting an app does not delete a cloud account or cancel an App Store subscription. Deleting a One Good Thing account does not delete its private on-device journal, because that journal is not part of the account. Follow our account deletion instructions and manage subscriptions through the store where you purchased them.
7. Your choices and rights
Depending on where you live, you may request access, correction, deletion, portability, restriction, or an explanation of how we process personal data. You may withdraw optional consent for future processing. We may need to verify that a request belongs to you.
Email [email protected] with the subject “Privacy request.” You may appeal a refusal by replying with the subject “Privacy appeal.” We do not discriminate against anyone for exercising a privacy right.
8. Children
Our games may be playable without an account. Creating a StackForge account requires the user to be at least 13. We do not knowingly collect personal data from a child under 13. If you believe a child provided account data, contact us so we can investigate and delete it.
9. Security and international processing
We use encrypted connections, authentication, access controls, private storage where appropriate, and database rules designed to limit normal account access to the account owner. No online system is guaranteed secure. Providers may process data in the United States or other countries where they operate, subject to applicable safeguards.
10. Changes and contact
We may update this policy as products or laws change. The date above shows the latest revision. We will provide additional notice when required.
[email protected]
JMB Assets LLC d/b/a StackForge Studios · United States