Skip to content
TrustIQ

Pebble Drop Saga

Mobile app · Pebblestone Games · com.example.pebbledrop

App identifier
com.example.pebbledrop
Publisher
Pebblestone Games
Platform
Android
Versions
App 3.8.1 · Android 14
Scan date and region
Oct 19, 2026 · EU (Ireland lab)
Consent state
Accepted and rejected tested; withdrawal not tested
Scan method
Lab device — authorized runtime traffic capture
Coverage
Substantial · methodology 0.9

Observed connections (8 endpoints, 8 companies)

Each row is a transmission observed in the tested session, the operator identified for that endpoint, and the information seen in requests. This table is the accessible equivalent of the data-sharing map.

Endpoints contacted by Pebble Drop Saga, their operators, scenarios, and information observed
Observed endpointIdentified operatorRoleScenariosInformation observed
ads.adreach.exampleAdreach Exchange

Declared

Advertising services
  • Consent accepted
  • Consent rejected
Identifiers, Network, Usage & viewing
bid.lanternfly.exampleLanternfly Ads

Declared

Advertising services
  • Consent accepted
Identifiers, Location, Usage & viewing, Network
sync.keystoneid.exampleKeystone Identity Graph

Declared

Identity resolution; Documented data brokerage

Documented data broker

  • Consent accepted
Identifiers, Network
collect.tallymark.exampleTallymark Analytics

Declared

Analytics and measurement
  • Consent accepted
  • Consent rejected
Usage & viewing, Interaction events, Network
api.sentinelverify.exampleSentinel Verify

Declared

Fraud prevention
  • Consent accepted
  • Consent rejected
Network
events.orbitalcloud.example

Contents not readable

Orbital Cloud

Declared

Content delivery and infrastructure
  • Consent accepted
  • Consent rejected
Network information only; contents unknown
t.t-sync.example

Contents not readable

Unresolved recipientNew in this scan

Unknown

Unknown or unresolved role
  • Consent accepted
Network information only; contents unknown
cdn.nimbuscdn.exampleNimbus Edge

Declared

Content delivery and infrastructure
  • Consent accepted
  • Consent rejected
Network

Documented relationships

Ownership and business relationships come from public records. They do not show that data from this product moved between these companies.

  • Adreach Exchange → Meridian Media Group

    DeclaredDocumented ownership

    Source: Meridian Media Group annual report 2025, list of subsidiaries · Mar 2, 2026

  • Lanternfly Ads → Brightpath Data Co.

    DeclaredDocumented ownership

    Source: Brightpath Data Co. press release, Nov 2025 · Nov 18, 2025

  • Lanternfly Ads → Keystone Identity Graph

    DeclaredDocumented business relationship

    Source: Keystone Identity Graph public partner directory · May 20, 2026

  • Adreach Exchange → Tallymark Analytics

    DeclaredDocumented business relationship

    Source: Tallymark integrations page lists Adreach · May 14, 2026

  • Unresolved recipient → Lanternfly Ads

    InferredInferred association

    Source: Shared TLS certificate organization field and IP range with bid.lanternfly.example · Oct 19, 2026

Unknown Further sharing unknown

TrustIQ observes what leaves the product. What recipients do afterward, including onward sharing, is outside what this scan can see.

Open questions

  • Orbital Cloud

    • Orbital Cloud hosts services for many customers. Which customer operates the contacted subdomain, and for what purpose, is not established.

  • Unresolved recipient

    • Operator not identified: domain registration is privacy-protected.
    • TLS certificate and IP range overlap with bid.lanternfly.example (inferred association, low confidence).
    • Request contents were not readable.

  • Nimbus Edge

    • Content delivery contact establishes where files were fetched from, not why. Purpose is attributed to the publisher, not to Nimbus Edge.