
Taffy Tug
Stretch candy ropes, hook gummies, and guide each treat into its syrup dock.
Hansa805 · com.xliryaybpcib.taffytug
At a glance
- Latest version
- v1.0.1 (2)
- Updated
- Sep 5, 2026 (1 month ago)
- APK size
- 18.6 MB
- Requires
- Android 8.0+ (API 26)
- CPU support
- ARM 32-bit, ARM 64-bit
- Category
- Casual (game)
- Permissions
- 20 (1 sensitive)
- Developer contact
- [email protected]
- Privacy
- Developer's privacy policy
About this APK
Taffy Tug is a game by Hansa805 in the Casual category. It includes native code for ARM 32-bit and ARM 64-bit, so it runs on practically every phone.
It asks for 20 permissions, 1 of them sensitive: read phone status and identity. The game can read the advertising ID that ad and analytics services use.
What's new in v1.0.1
Description
From the listing uploaded by “superpocket”.
Security & authenticity
Signing certificate
- Certificate issued to “zph-mph” Not the developer's name (“Hansa805”). Names in certificates can't be verified, so this alone proves nothing.
Store checks and file details
- Developer signature verified Sep 5, 2026
- Signed byCN=Jx Clarynx, O=zph-mph, OU=anon.org, L=Caraga, ST=Surigao Del Norte, C=8609
- Signing certificate (SHA-1)7D:64:F9:C2:53:C7:EF:35:A0:72:0F:6F:8A:80:2B:D4:B9:20:AA:3A
- File MD526d06c39ed10b7d58a1dcd0a7a390337
- Uploaded by “superpocket” Silver tier · 5,272 followers · uploading since 2016
Scans and ratings come from the source store; the certificate comparisons are AAPKs's own, made from the files' published signatures. AAPKs doesn't scan files itself — compare the MD5 and signer after downloading.
Permissions (20)
Taffy Tug requests 20 permissions, 1 of them sensitive.
- Read phone status and identity Sensitive android.permission.READ_PHONE_STATE
- Access adservices ad id android.permission.ACCESS_ADSERVICES_AD_ID
- Access adservices attribution android.permission.ACCESS_ADSERVICES_ATTRIBUTION
- Access adservices topics android.permission.ACCESS_ADSERVICES_TOPICS
- Advertising ID com.google.android.gms.permission.AD_ID
- Apphub bind apphub service (custom) com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE
- Attest (custom) com.amazon.privacypass.ATTEST
- Commondata get common data (custom) com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
- Control vibration android.permission.VIBRATE
- Full network access android.permission.INTERNET
- Google Play install referrer com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
- Internal broadcast protection (app-defined) com.xliryaybpcib.taffytug.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
- Prevent the device from sleeping android.permission.WAKE_LOCK
- Read privileged phone state android.permission.READ_PRIVILEGED_PHONE_STATE
- Receive push notifications com.google.android.c2dm.permission.RECEIVE
- Reorder tasks android.permission.REORDER_TASKS
- Run foreground services android.permission.FOREGROUND_SERVICE
- Show notifications android.permission.POST_NOTIFICATIONS
- View Wi-Fi connections android.permission.ACCESS_WIFI_STATE
- View network connections android.permission.ACCESS_NETWORK_STATE
Required hardware & features
- Basic touch input android.hardware.faketouch
- Portrait screen android.hardware.screen.portrait
- Wi-Fi android.hardware.wifi
Taffy Tug APK: questions and answers
Can I install this APK over the version I already have?
Only if it is signed with the same certificate as the copy on your phone and isn't an older version. If Android says “App not installed”, the certificates differ; uninstalling your copy first works but deletes its data unless it is backed up.
Is the Taffy Tug APK safe?
No one can promise that a file is safe, but some things can be checked. The source store rates this file Trusted. After downloading, check that the file's MD5 is 26d06c39ed10b7d58a1dcd0a7a390337.