Verify the file before you install it

Download only from our sources

• The download button on this site (postback.ly-ad.de/dl)
• The release page on GitHub
• The app page on ApkPure (it may lag behind the latest version, so its fingerprint can differ)

Treat any other link (a channel, a site, or someone who sent you the file) as untrusted.

Compare the file's fingerprint (SHA-256)

This is the latest version published on GitHub, read directly from there:

To compute the fingerprint of the file you downloaded: on your phone, install a file-hash app (search "hash checker"), choose SHA-256 and pick the file. Or in Termux: sha256sum yardova.apk. The two values must match character for character. If they differ by even one character, don't install the file.

The fingerprint changes with every app update.

Signing certificate

The file is signed with our own private key, and the certificate fingerprint (SHA-256) stays the same across updates:

To check it from a computer: apksigner verify --print-certs yardova.apk or keytool -printcert -jarfile yardova.apk. The certificate owner shows as "Warehouse Tycoon", which is the app's previous name. After installation, Android rejects any update signed with a different certificate.

Scan it on VirusTotal

Search the fingerprint on VirusTotal. If nothing shows up, open the site, upload the file and wait for the scan.

One or two engines may flag it, which is common for apps from outside the store. What matters is that dozens of warnings don't appear.

Review the permissions

The app only asks for:

• Internet and network state (to work online)
• Notifications (to tell you when your worker finishes or a withdrawal is confirmed)
• Advertising ID and ad services (for the ad networks inside the game)
• Technical permissions that belong to the ad and notification libraries (background operation and rescheduling notifications after a device restart)

It does not ask for the camera, microphone, location, contacts, messages or files.