Privacy Policy

Request data deletion

Overview

This Privacy Policy explains how Shelf-Shuffle (the “Application”) handles Personal Data belonging to people who use it (“Users”).

You can print this page from your browser’s print menu if you want a copy for your records.

Who is responsible

The Owner and Data Controller is:

Manna Games Ltd.
Email: support@manna-games.com

Policy summary

Personal Data is processed for the purposes and through the services described below.

Turning off interest-based ads

Besides any opt-out tools offered by the services named in this Policy, Users can follow guidance from YourOnlineChoices (EU), the Network Advertising Initiative (US), the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan), and similar programmes. These resources let Users set preferences for many advertising tools. We encourage Users to use them alongside this Policy.

The Digital Advertising Alliance also provides AppChoices, a mobile app that helps control interest-based advertising inside apps.

Users can also limit certain ad features in their device settings (for example mobile advertising settings or general ads settings).

What Data we collect

Depending on how the Application and its third-party partners work, Personal Data may include: Trackers; Usage Data; advertising device IDs (such as Google Advertiser ID or IDFA); UUIDs; crash data; device information; geography/region; User and session counts; session length; in-app purchases; app opens and updates; launches; operating systems; diagnostics; advertising data; and product interaction.

More detail appears in the sections below and in any notices shown before Data is collected.

Users may provide some Data themselves. Usage Data is typically gathered automatically while the Application is in use.

Unless we say otherwise, requested Data is required for the Service to work. If we mark something as optional, Users may skip it without affecting core functionality. If you are unsure what is required, contact the Owner.

Cookies and other Trackers used by the Application or by third-party providers support delivery of the Service and the other purposes described here.

Users are responsible for any third-party Personal Data they obtain, publish, or share through the Application.

How and where Data is processed

How we process Data

The Owner uses suitable security measures to help prevent unauthorised access, disclosure, alteration, or destruction of Data.

Processing happens with computers and related tools, under organisational practices tied to the stated purposes. Besides the Owner, certain people involved in running the Application (for example administration, sales, marketing, legal, or system administration) and external providers (such as technical vendors, mail carriers, hosting partners, IT firms, or communications agencies) may access Data where needed. Those parties may be appointed as Data Processors. An up-to-date list is available from the Owner on request.

Where processing takes place

Data is processed at the Owner’s operating locations and wherever else the parties involved in processing are based.

Depending on where the User is, Data may be transferred to another country. Details about those transfers appear in the service-specific sections below.

How long we keep Data

Unless this Policy says otherwise, Personal Data is kept only as long as needed for the purpose it was collected for, and may be held longer where the law requires it or where the User has consented.

Why we process Data

We collect User Data so we can provide the Service, meet legal duties, respond to lawful requests, protect our rights and interests (and those of Users or others), detect abuse or fraud, and support: Advertising; Infrastructure monitoring; Content performance and A/B testing; Analytics; and Platform services and hosting.

For purpose-by-purpose Data details, see “Detailed processing information” below.

Detailed processing information

Personal Data is collected for these purposes through the following services.

Advertising

These services use User Data to show advertising — for example banners and other ads in the Application — which may reflect User interests. Not every Personal Data category is used for advertising. Conditions for each provider appear below.

Some services use Trackers or behavioural retargeting (ads based on interests and behaviour, including activity outside the Application). Check each provider’s privacy policy for more detail. Most of these tools offer an opt-out; see also the interest-based advertising section in this Policy.

Analytics

These tools help the Owner understand traffic and User behaviour.

Content performance and A/B testing

These services help the Owner measure how Users respond to changes in structure, wording, or other parts of the Application.

Infrastructure monitoring

These services watch how Application components behave so performance, upkeep, and troubleshooting can improve. Exact Data depends on how each tool is set up.

Platform services and hosting

These platforms host or run key parts of the Application and may include analytics, commerce, payments, and similar tools that involve Personal Data. Some rely on distributed servers, so the exact storage location can be hard to pin down.

Interest-based advertising opt-outs

In addition to provider-specific controls, Users may use YourOnlineChoices (EU), the Network Advertising Initiative (US), the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan), or similar programmes to set tracking preferences for many ad tools. We recommend using those resources together with this Policy.

AppChoices from the Digital Advertising Alliance can help manage interest-based ads in mobile apps. Device advertising settings can also limit certain ad features.

Further information for Users

Legal bases for processing

The Owner may process Personal Data when one or more of the following apply:

• the User has consented for one or more specific purposes;
• processing is needed to perform a contract with the User, or for steps before that contract;
• processing is required to meet a legal obligation on the Owner;
• processing relates to a task in the public interest or to official authority held by the Owner;
• processing is needed for legitimate interests of the Owner or a third party.

The Owner can explain which basis applies in a given case, including whether providing Data is a legal or contractual requirement, or needed to enter a contract.

More on retention

Unless stated otherwise, Personal Data is kept while needed for its collection purpose, and may be kept longer for legal reasons or with consent.

• Data tied to performing a contract is kept until that contract is fully performed.
• Data processed for legitimate interests is kept as long as those interests require. Specific interests are described in this Policy or available on request.
• With consent, Data may be kept longer until consent is withdrawn. The Owner may also keep Data longer where the law or an authority requires it.

When the retention period ends, Personal Data is deleted. After that, rights of access, erasure, rectification, and portability generally can no longer be exercised for that Data.

GDPR rights

Where the law allows, Users may:

• Withdraw consent at any time for processing based on consent.
• Object to processing when it is based on grounds other than consent.
• Access their Data, including confirmation of processing, related details, and a copy of Data being processed.
• Ask for correction of inaccurate or incomplete Data.
• Restrict processing, in which case Data is generally stored only.
• Request erasure of their Personal Data.
• Receive their Data in a structured, commonly used, machine-readable format and, where technically feasible, have it sent to another controller.
• Lodge a complaint with their competent data protection authority.

Users may also ask about the legal basis for international transfers (including to international organisations) and about security measures protecting their Data.

Objecting to processing

Where processing is based on public interest, official authority, or legitimate interests, Users may object by explaining their particular situation.

If Personal Data is used for direct marketing, Users may object at any time, free of charge, without giving a reason. After a marketing objection, that Data will no longer be used for marketing. Relevant sections of this Policy indicate whether marketing processing occurs.

How to exercise rights

Send requests to the Owner using the contact details in this Policy. Requests are free of charge. The Owner will respond as soon as possible and within one month, with the information the law requires. Corrections, deletions, or restrictions will be passed on to recipients of the Data unless that is impossible or involves disproportionate effort. On request, the Owner will tell Users who those recipients were.

Additional notes

Legal action

The Owner may use Personal Data for legal purposes in court or in steps leading to legal action related to misuse of the Application or Services. Users acknowledge that public authorities may require disclosure of Personal Data.

Extra information on request

Beyond this Policy, the Application may provide further context about specific Services or Data practices when asked.

System logs and maintenance

For operation and maintenance, the Application and third-party services may keep system logs of interactions or use other Personal Data (such as IP address) for those purposes.

Information not listed here

More detail about collection or processing can be requested from the Owner at any time using the contact details above.

Policy updates

The Owner may change this Privacy Policy at any time by posting updates on this page and, where practical, inside the Application and/or by notice using available contact details. Please check this page regularly and note the “last updated” date.

If a change affects processing that relies on consent, the Owner will seek fresh consent where required.

Definitions

Personal Data (or Data)

Any information that, alone or with other information — including an identification number — identifies or can identify a natural person.

Usage Data

Information collected automatically through the Application or its third-party services. This can include IP addresses or domain names, URI addresses, request time and method, response size, server status codes, country of origin, browser and OS details, time spent in the Application, navigation paths, and other device or IT-environment parameters.

User

The individual using the Application, who (unless stated otherwise) is also the Data Subject.

Data Subject

The natural person Personal Data relates to.

Data Processor (or Processor)

A natural or legal person, authority, agency, or other body that processes Personal Data for the Controller, as described in this Policy.

Data Controller (or Owner)

The natural or legal person, authority, agency, or other body that alone or jointly decides why and how Personal Data is processed, including security measures for the Application. Unless stated otherwise, the Owner of this Application is the Data Controller.

This Application

The means through which User Personal Data is collected and processed.

Service

The service offered by this Application, as described in the Terms (if any) and in the Application itself.

European Union (or EU)

Unless stated otherwise, references to the EU include current EU Member States and the European Economic Area.

Cookie

A Tracker made of small data stored in the User’s browser.

Tracker

Any technology — such as Cookies, unique identifiers, web beacons, embedded scripts, e-tags, or fingerprinting — that can track Users, for example by reading or storing information on a device.

Legal notice

Unless this document says otherwise, this Policy applies only to this Application.

Latest update: September 3, 2026. This page is for informational use. Have a qualified lawyer review it before relying on it as a binding privacy notice.

← Back to Shelf-Shuffle · Terms of Use