Candy Crush Saga is a freemium game. It’s free to start, but the friction is built-in: limited lives (5 hearts), limited boosters, and the premium currency—gold bars—cost real money. When you play through Facebook on a web browser (as opposed to mobile), the game syncs your progress to the cloud. This cloud sync is what hackers claim to exploit.