App analysis · 12.10.2026

Smyths Toys

com.cultus.smyths · version 2.0.0

3SDKs found

1companies

1companies outside the EEA

4sensitive permissions

In short

SDKs found: 3. Companies: 1, of which outside the EEA — 1. Sensitive permissions: 4 — all code inside the app, including embedded SDKs, can use them.

What is inside — embedded SDKs

Google AdMob — Google LLC, United States outside EEA advertising
Google Firebase Analytics — Google LLC, United States outside EEA analytics
Google User Messaging Platform — Google LLC, United States outside EEA consent platform

Sensitive permissions (4)

advertising ID (Privacy Sandbox) — android.permission.ACCESS_ADSERVICES_AD_ID
ad attribution (Privacy Sandbox) — android.permission.ACCESS_ADSERVICES_ATTRIBUTION
ad interests (Privacy Sandbox Topics) — android.permission.ACCESS_ADSERVICES_TOPICS
advertising ID — com.google.android.gms.permission.AD_ID

All manifest permissions (12)

android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.ACCESS_NETWORK_STATE
android.permission.FOREGROUND_SERVICE
android.permission.INTERNET
android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
com.android.vending.CHECK_LICENSE
com.cultus.smyths.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.google.android.gms.permission.AD_ID

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: com.cultus.smyths.xapk (51.0 MB)

Package: com.cultus.smyths · version 2.0.0 (code 2)

Android: minimum API 24, target API 35

File SHA-256: 5f66e7fc15bc9d038191ef48277e6c85c4e9effd9e36a5bbbe7e6b78ea72c692

Developer signature (SHA-256): dc78f8543798fba3845a6e3d7ffe4937a3b335943be6ca28d875e0b633f44515

Signed by: Google Inc. (Mountain View, US) · outside EEA · key since 2026-06-12

Library: 63 SDK · 81 permissions · 2769b78c1753

File source: APKPure (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app