Balatro

"We also share your data with our service providers who need to process it in order for us to provide you with our services and the App. ... We may want to share your information around our group so they can use it for the same internal purposes as we do described above. ... please note we may share your email address with them."

Data is shared with service providers, current and future group companies, social media platforms, analytics providers, and advertisers, creating a broad ecosystem of third-party data sharing.

"We use Google Ad ID, IDFA and Advertising ID as online identifiers when permitted by those platforms. ... We use analytics providers to find out more about our digital community for example by using unique identifiers to analyse the in-game behaviour of our players and to find out who downloaded a game after seeing our ad."

Playstack uses advertising identifiers (Google Ad ID, IDFA), social media data, and analytics providers like AppsFlyer to track users across platforms and link ad exposure to app downloads, building cross-service profiles.

"Your Technical Data boils down to: the IP address used to connect your device to the Internet, device unique ID, log in data, your in-app actions, the operating system, platform and device model you are using, other technology/apps on the device you are using including SDK version, timestamp, API key, application version, device identifier, iOS/Google Identifier for Advertising, locale, time zone, mobile network and network status (WiFi, etc.), general location information, connection type, browser information and cookies, pixels, beacons, scripts and tags."

Playstack collects a wide range of device data including unique device IDs, installed SDK information, network status, and advertising identifiers, much of which goes beyond what is needed for core game functionality.

"Your Technical Data boils down to: ... general location information (not sufficient to derive city and street names), connection type (e.g. mobile data or WiFi) ... Location Data (what area you are based in according to your social media profile)."

Playstack collects general location data via IP address, network status, and social media profiles as part of routine technical data collection, even when location is not needed for gameplay.

"We may need to update this Policy at any time to reflect changes in our business. All changes will be flagged in the app and on our website and if we consider it appropriate, we will notify users of important changes by email or in-app too."

Playstack reserves the right to change the privacy policy at any time, with email notification only when they 'consider it appropriate,' giving them discretion over whether users are meaningfully informed of changes.

"We only store your data for as long we need it for the purposes for which we collected it in the first place. Examples of timeframes that we may use to assess when we will delete your data are when you have been an inactive customer for two years or when we consider that the risk of any legal claim is negligible. In some circumstances we may anonymize your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you."

Retention periods are described as examples rather than firm commitments, and anonymized data can be kept indefinitely. The 24-month inactivity threshold is presented as a guideline, not a guarantee.

"Should you wish to have any information about you deleted, please let us know at data@playstack.com. Please note that in order to process your request you must delete our games from your mobile devices and clear our cookies from any device where you have played our games in a web browser. We may not always be able to comply with your erasure request for specific legal reasons."

Account deletion requires emailing support rather than a self-service option, and users must manually delete games and clear cookies from all devices before the request can be processed, creating unnecessary friction.