Privacy Policy

Overstuffed: Pack It or Burst — and other games published by Clever House Company

Effective date: October 9, 2026

Clever House Company (referred to as "we," "us," or "the Developer") is the developer and publisher of Overstuffed: Pack It or Burst (the "Game"), and this policy applies to that Game and to any other mobile applications we publish. This company is represented for privacy purposes by Alexandru Mos. Protecting your personal data matters to us, and this Privacy Policy explains what information we and our service partners collect when you play our games, why we collect it, and the choices and rights available to you.

1. Scope of this policy

This policy applies to Overstuffed: Pack It or Burst on Google Play (and any other storefront where we publish it), to the advertising and analytics services embedded in the Game, and to any other application released by Clever House Company that links to this policy. It does not cover third-party websites or services that we do not control, even if you reach them through a link inside the Game.

2. Data we and our partners collect

The Game is free to play and funded by in-game advertising rather than by accounts or purchases of personal information. We do not require you to create an account or provide your name, email address, or phone number to play. However, to operate, keep secure, and fund the Game through advertising, we and the SDK partners listed in Section 3 automatically collect the following categories of data when you install and use the Game:

• Advertising and analytics identifiers — such as the Google Advertising ID (GAID) on Android or the Identifier for Advertisers (IDFA) on iOS, and internal SDK-generated identifiers used to measure ad performance and gameplay analytics.
• Gameplay and app-interaction data — for example, sessions played, levels completed, in-game events, time spent, and how you interact with ads shown to you (such as impressions and clicks).
• Approximate location — derived from your IP address and device settings, at city/country and time-zone level only. We do not collect precise GPS location.
• Device information — device make and model, operating system and version, screen size and orientation, language and locale, and similar hardware/software attributes.
• Network information — connection type (e.g., Wi-Fi or mobile data), IP address, and general network performance data.
• Diagnostic data — crash reports and performance data used to fix bugs and improve stability.

We do not knowingly collect financial account details, government ID numbers, or precise (GPS-level) location through the Game.

3. Third-party SDKs and service partners

Like most ad-supported mobile games, Overstuffed does not build its own advertising or analytics infrastructure from scratch. Instead it uses the following third-party software development kits (SDKs), which operate as independent data processors/controllers for the functions described below and have their own privacy policies:

Partner	Function in the Game
Appodeal (privacy policy)	Ad mediation platform. Requests banner, interstitial and rewarded-video ads from the ad networks below, selects which one serves each impression, and shows the consent prompt described in Section 5. Appodeal and its partners receive your advertising ID, IP address and the device and network information described in Section 2 to do this.
Google AdMob / Google Ad Manager (privacy policy)	Ad network reached through Appodeal. Google's User Messaging Platform is also used to store and change your consent choices.
Other ad networks and exchanges reached through Appodeal	Including AppLovin (and AppLovin MAX), Unity LevelPlay (ironSource) and Unity Ads, BidMachine, Bidon, Meta Audience Network, Mintegral, Pangle (ByteDance), Liftoff/Vungle, InMobi, Digital Turbine (DT Exchange), Moloco, MobileFuse, Chartboost, Amazon Publisher Services, BIGO Ads, Yandex, myTarget/VK Ads, Ogury, PubMatic, Smaato, Verve, Start.io and TaurusX. Each acts under its own privacy policy.
AppsFlyer (privacy policy)	Install attribution: measures which advertising campaign, if any, led to the Game being installed, using your advertising ID, IP address and device information.
Meta Platforms (Facebook SDK) (privacy policy)	App events and install attribution for advertising campaigns we run on Meta (Facebook, Instagram): records that the Game was installed and opened, with your advertising ID and device information, so Meta can measure and optimise those campaigns.
Google Firebase Analytics (privacy policy)	Gameplay analytics: sessions, level progress and in-game events, and the revenue each ad impression earned, so we can improve the Game.
Google Play services (Billing, In-App Review, In-App Updates, Play Games Services)	Processing optional in-app purchases, the "rate this game" card, update prompts, and optional Google Play Games sign-in. The Game does not use Play Games for leaderboards or cloud save at this time.

Because a mediation platform can route a given ad impression to any certified network in its marketplace, the exact set of networks serving you an ad changes over time and by region; the list above is the set built into the current version of the Game. Appodeal's own list of partners is published with its privacy policy at appodeal.com/privacy-policy.

4. Why we process this data

We and our partners use the data described above to:

• Operate, host, and deliver the Game to your device.
• Diagnose crashes, fix bugs, and improve performance and game balance.
• Measure how players engage with levels and features so we can improve the Game and design future updates.
• Select, deliver, and measure the advertising that funds free access to the Game, including showing ads that are more relevant to you where you have not opted out (see Section 5).
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Respond to you when you contact us directly.

Where required by your jurisdiction (for example, under the GDPR in the EEA/UK), processing for personalized advertising and non-essential analytics is based on your consent, which is requested through a consent prompt the first time you open the Game and can be withdrawn at any time from Settings (see Section 5). Processing needed to operate the Game itself (such as basic crash diagnostics) is based on our legitimate interest in providing a functioning, secure product.

5. Consent and your choices

If you are in the EEA, the UK, Switzerland, or a US state with its own privacy law, the Game asks for your advertising-consent choice the first time it starts, through a consent form built on Google's User Messaging Platform and the IAB Transparency & Consent Framework. You can review or change that choice at any time from the Game's Settings screen via the Privacy & ads option, which reopens the same form.

You can also limit ad-ID-based tracking directly at the device level:

• iOS: Settings → Privacy & Security → Tracking, and turn off "Allow Apps to Request to Track" (or decline the App Tracking Transparency prompt when shown).
• Android: Settings → Google → Ads, and select "Delete advertising ID" or "Opt out of Ads Personalization" (wording varies by Android version).

Turning these off means you will still see ads (since ads are how the Game stays free), but they will be less tailored to your interests. Some data may still be collected for purposes other than personalized advertising, such as fraud prevention, basic analytics, and frequency capping.

6. How long we keep data

We and our SDK partners retain personal data only for as long as needed for the purposes described in this policy, generally no longer than 13 months from collection for raw event-level data. After that period, data is either deleted or aggregated/anonymized so it can no longer be linked back to you, and retained only in that anonymized form for statistical purposes.

7. How data is shared

We may share the data described in Section 2 with:

• The SDK and ad-mediation partners listed in Section 3, so they can deliver, measure, and be paid for the advertising shown in the Game.
• Analytics and crash-reporting providers, so we can maintain and improve the Game.
• Service providers who host or support our infrastructure, bound by confidentiality and data protection obligations.
• Public authorities or other third parties where required by law, legal process, or to protect the rights, property, or safety of Clever House Company, our users, or others.
• A successor entity in the event of a merger, acquisition, or sale of some or all of our assets.

We do not sell your personal data for money. Where advertising partners' use of device/ad identifiers for cross-app advertising measurement is legally considered a "sale" or "share" under laws such as the CCPA/CPRA, see Section 11 for how to opt out.

8. International data transfers

Our SDK partners operate globally, which means your data may be processed in countries other than your country of residence, including the United States. Where we or our partners transfer personal data out of the EEA, UK, or Switzerland, we rely on legally recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses or an equivalent adequacy framework, to protect that data.

9. Children's privacy

Overstuffed: Pack It or Burst is designed for a general audience aged 13 and older and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data through the Game, please contact us using the details in Section 15 and we will take steps to delete it.

10. Your rights (EEA, UK, and other GDPR-aligned regions)

If data protection laws such as the GDPR apply to you, you have the right to:

• Confirmation and access — ask whether we process your data, and get a copy of it.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data, for example if it is no longer needed, you withdraw consent, or you object to processing.
• Restriction of processing — ask us to limit how we use your data in certain circumstances.
• Objection — object to processing based on legitimate interest or withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• Data portability — receive the data you provided to us in a structured, commonly used, machine-readable format.
• Lodge a complaint — with your local data protection supervisory authority (for example, the CNIL in France, or the ICO in the UK) if you believe we have not met our obligations.

11. Your rights (California residents)

If you are a California resident, the CCPA/CPRA gives you the right to:

• Know what personal information we and our partners collect, use, and share.
• Request deletion of personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising — you can do this using the device-level opt-outs in Section 5, or by contacting us using the details in Section 15.
• Not receive discriminatory treatment for exercising any of these rights.

12. How to exercise your rights

To exercise any of the rights above, email us at contact@cleverhouse-engineering.com with the subject line "Privacy Request," and describe the request and the app (Overstuffed: Pack It or Burst) it relates to. To protect your data, we may ask you to verify your identity before completing certain requests (for example, deletion). We will respond within one month of a verifiable request; if a request is unusually complex, we may extend this by up to two further months and will tell you why. We may decline requests that are manifestly unfounded, excessive, or repetitive, as permitted by applicable law.

13. Data security

We take reasonable technical and organizational measures designed to protect the data described in this policy against loss, misuse, and unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your personal data that we are legally required to disclose, we will notify affected users as required by applicable law.

14. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in the Game's features, our SDK partners, or applicable law. We will update the effective date at the top of this page when we do. We encourage you to review this page periodically. Continued use of the Game after an update constitutes acceptance of the revised policy where permitted by applicable law.

15. Contact us