Privacy Policy for Corner Card Shop

Effective date: September 17, 2026
Last updated: October 2, 2026

This Privacy Policy explains what information the mobile game Corner Card Shop (the "App") collects, how it is used, who it is shared with, and the choices you have. We wrote it in plain language. If anything is unclear, contact us (see section 13).

1. Who we are

The App is published by R&O Holdings LLC ("we", "us", "our"), a Pennsylvania limited liability company based in Newtown, Pennsylvania, United States.

• Contact email: rjr5021@gmail.com
• Mailing address: 38 Eagleton Farm Road, Newtown, PA 18940, USA

2. The short version

• Optional account. You can play without signing in. Your game progress is saved on your phone. If you choose to sign in with Apple, your progress is also saved to the cloud so it carries across devices.
• Ads come from Google AdMob. Ads (for example, "watch an ad for 2x income") are always optional. To show and measure ads, Google collects device and usage information. Your iPhone will ask whether you allow tracking. If you say no, you still get ads, and every feature still works.
• Purchases go through Apple. If you buy Holos or other items, Apple handles the payment. We never see your card or bank details. We use a service called RevenueCat to confirm and restore purchases.
• We use PostHog to understand how the game is played, in an anonymous/aggregated way, so we can improve it.
• We do not sell your personal information for money, and we do not use chat, contacts, photos, microphone, or your precise location.
• Cards in the game have no real-world value. They cannot be traded, sold or cashed out for real money.

3. Information stored only on your device

The App saves your game on your device using the device's local storage. This includes:

• your shop progress, level, locations, staff and upgrades
• your cards, binder, graded cards and trophies
• your in-game Cash and Holos balances
• your settings (sound, vibration, tutorial progress)
• timestamps the game needs, such as when you last played (for "while you were away" earnings) and daily reward streaks

If you do not sign in, this information is not sent to us or anyone else. We cannot see it, back it up, or recover it. If you delete the App, or reset the game in Settings, this information is erased and cannot be brought back (unless you have cloud save turned on - see section 4d).

4. Information collected by third-party services

We use several outside companies to run the App. They collect some information directly from your device when you use their features.

4a. Advertising: Google AdMob

The App shows ads from Google AdMob. At launch we plan to use rewarded ads (ads you choose to watch in exchange for an in-game bonus), and we may rarely show a full-screen ad at a natural break. We do not use banner ads.

According to Google, the Google Mobile Ads SDK may collect:

• Device identifiers: the Apple Advertising Identifier (IDFA) only if you allow tracking, and other identifiers that are limited to the app or developer (such as the Identifier for Vendors)
• IP address, which may be used to estimate your general location (such as your country or city), but not your precise GPS location
• Advertising data, such as which ads you have seen or tapped
• Product interaction data, such as app launches, taps and video views
• Performance data, such as app launch time, hang rate or energy use
• Crash logs from the ad software
• basic device information, such as device model, operating system version, and language

How it is used: to show ads, to limit how often you see the same ad, to prevent fraud, to measure how ads perform, and to improve Google's advertising products. If you allow tracking, Google may also use this information to show ads based on your interests and on your activity in other apps and websites.

App Tracking Transparency (ATT). Before the App can access your Advertising Identifier, iOS shows a system message asking for your permission. You can say "Ask App Not to Track" and the App works exactly the same; you will simply see ads that are less personalized. You can change your answer at any time in your iPhone's Settings -> Privacy & Security -> Tracking.

Users in the European Economic Area, the United Kingdom and Switzerland will be shown a consent message (provided through Google's User Messaging Platform) before personalized ads are used. You can change these choices later from Settings -> Privacy Choices inside the App.

You can learn more about how Google uses information at policies.google.com/technologies/partner-sites and read Google's Privacy Policy at policies.google.com/privacy.

4b. In-app purchases: Apple and RevenueCat

The App offers optional in-app purchases, such as bundles of Holos (our premium in-game currency). All payments are processed by Apple under your Apple Account and Apple's own privacy policy (apple.com/legal/privacy). We never receive your name, email, payment card or billing address from Apple.

We use RevenueCat, Inc. to check that purchases are valid, deliver what you bought, and let you restore purchases. RevenueCat receives:

• a random, anonymous app user ID created by the App (not your name or email)
• purchase history and transaction details (which item, price, currency, date, and Apple's transaction ID)
• basic device and app information, such as country/region of your App Store, device type, OS version and app version

We use this to deliver and restore purchases, prevent fraud, handle refunds, and understand in general which items are popular. We do not use purchase information for tracking. RevenueCat's privacy policy: revenuecat.com/privacy.

4c. Analytics: PostHog

We use PostHog to understand how the game is played (for example, which levels players reach and where they stop playing). This includes gameplay events, app version, device model, operating system and language. It does not include your advertising identifier, precise location or contacts. If you're signed in, events are linked to your account ID. You can turn this off in Settings -> "Share usage stats."

4d. Optional account and cloud save: Supabase

If you choose "Sign in with Apple," we receive an account identifier and, if you allow it, an email address (Apple may give us a private relay address). We use them only to store and restore your game save across devices. Your save (shop progress, cards, currencies) is stored with our database provider, Supabase. You can delete your cloud save and account at any time in Settings -> Cloud save -> Delete cloud data.

4e. Crash and error reporting: Sentry

We use Sentry to automatically capture crash reports and error details if the App malfunctions, so we can find and fix bugs. This can include device model, operating system version, app version, and technical details about what the App was doing when it crashed (such as a stack trace). Sentry's privacy policy: sentry.io/privacy.

5. Information you choose to send us

If you email us for support or to report a problem or an inappropriate ad, we receive your email address, your message, and anything you choose to attach (such as a screenshot). We use it only to reply to you and fix problems.

6. Information we do NOT collect

The App does not ask for or collect:

• your name, phone number or home address (unless you email us)
• your contacts, photos, camera, microphone or files
• your precise (GPS) location
• health, fitness or financial account information
• chat messages or anything you post publicly (the App has no chat and no user-generated content)

The App uses real city names for some in-game locations. This does not use or reveal your location.

7. How we share information

We share information only as described in this policy:

• With Google (AdMob) to show and measure ads, as described in section 4a.
• With Apple and RevenueCat to process, verify and restore purchases, as described in section 4b.
• With PostHog for anonymous/aggregated gameplay analytics, as described in section 4c.
• With Supabase to store your cloud save, if you sign in, as described in section 4d.
• With Sentry for crash and error reports, as described in section 4e.
• With the law. If we are required to by law, a court order, or to protect the rights and safety of our users or others.
• If the business changes hands. If the App is transferred to a new owner, information can be transferred as part of that, and this policy will continue to apply.

We choose partners who publish privacy policies and commit to protecting user data. We require that any third party that receives user data from the App provides the same or equal protection of that data as described in this policy, as Apple requires.

We do not sell your personal information for money. However, some US state laws (such as California's) treat allowing an advertising company to collect device identifiers for interest-based ads as a "sale" or "sharing" of personal information. You can opt out at any time by choosing "Ask App Not to Track" (or turning tracking off in iOS Settings -> Privacy & Security -> Tracking), and by emailing us at rjr5021@gmail.com with the subject "Do Not Sell or Share".

8. How long information is kept (data retention)

• Game progress on your device: kept until you reset the game or delete the App. We never have a copy unless you use cloud save.
• Cloud save data (Supabase): kept until you delete your cloud save/account in Settings, or delete your account entirely.
• Advertising data: kept by Google according to Google's retention policies (policies.google.com/technologies/retention).
• Purchase records: kept by RevenueCat and Apple for as long as needed to provide purchases and restores, handle refunds, and meet tax and accounting laws, according to their policies.
• Analytics data (PostHog): kept in accordance with PostHog's retention settings, used only in aggregate/anonymous form to improve the game.
• Support emails: kept for up to 24 months after the conversation ends, then deleted, unless we need them longer to resolve a dispute or follow the law.

9. Children's privacy

Corner Card Shop is a game for a general audience. It is not designed for or directed to children under 13, and it is not in the App Store's Kids category.

We do not knowingly collect personal information from children under 13 (or the minimum age required in your country). In the United States, the Children's Online Privacy Protection Act (COPPA) limits how apps can collect information, including device identifiers used for ads, from children under 13. If you are a parent or guardian and believe your child under 13 has used the App in a way that gave us or our partners personal information, contact us at rjr5021@gmail.com. We will take steps to delete that information and, where possible, ask our partners to do the same.

We ask Google AdMob to show ads that are suitable for the App's age rating.

10. Your choices and rights

Choices everyone has:

• Tracking: allow or deny in the ATT message, and change it any time in iOS Settings -> Privacy & Security -> Tracking.
• Ads: rewarded ads are always optional. You never have to watch one to keep playing.
• Consent choices (EEA/UK/Switzerland): change them in the App under Settings -> Privacy Choices.
• Analytics: turn off "Share usage stats" in Settings.
• Cloud save: turn off, or delete your cloud data, in Settings -> Cloud save.
• Delete your game data: use the reset option in the App's Settings, or delete the App.
• Report an inappropriate ad: email rjr5021@gmail.com with a screenshot if you can.

Your rights under privacy laws. Depending on where you live (for example, the EU/UK under the GDPR, or US states such as California, Colorado, Virginia, Connecticut, Utah and Texas), you may have the right to know what personal information is collected about you, to access or get a copy of it, to correct it, to delete it, to object to or restrict certain uses, to withdraw consent, and to opt out of targeted advertising or the "sale"/"sharing" of personal information.

Because most players do not have accounts and we never receive on-device game data unless you enable cloud save, we usually cannot identify you ourselves. Most of the personal data is held by Google, RevenueCat, Supabase and PostHog. To use your rights:

1. Email rjr5021@gmail.com with the subject "Privacy request". We will reply within 30 days (or the time the law requires) and help you, including passing the request to our service providers.
2. For Google advertising data, you can also use Google's tools at myadcenter.google.com and policies.google.com/privacy.

We will not treat you differently for using your privacy rights. You can also complain to your local data protection authority.

Legal bases (EEA/UK users). We rely on your consent for personalized advertising, tracking, and cloud save sign-in; on our legitimate interests for non-personalized ads, fraud prevention, analytics and keeping the App working; and on performing our contract with you to deliver in-app purchases.

11. Security and international transfers

We keep the amount of information we handle to a minimum. Information sent to our service providers is sent over encrypted (HTTPS) connections. No method of storage or transfer is 100% secure, but we choose partners with strong security practices.

We are based in the United States, and our partners may process information in the United States and other countries. Where required, they use legal safeguards such as the EU Standard Contractual Clauses.

12. Changes to this policy

We may update this policy when the App changes (for example, if we add new features or a new service provider) or when laws change. When we do:

• we will change the "Last updated" date at the top,
• we will post the new version at this same web address, and
• if the changes are important, we will also tell you inside the App (for example, a message on the Welcome Back screen) before the change takes effect.

Continuing to use the App after an update means the updated policy applies. Earlier versions are available on request.

13. Contact us

Questions, privacy requests, or reports of inappropriate ads:

R&O Holdings LLC
Email: rjr5021@gmail.com
Mail: 38 Eagleton Farm Road, Newtown, PA 18940, USA