Privacy policy
This policy explains what data the ArrowShift app ("ArrowShift", "the app") and this website handle, why, and what choices you have. ArrowShift is made by mobilectapps, an independent developer based in Türkiye ("we", "us"). We are the data controller for the app.
In short: ArrowShift has no accounts and never asks for your name, email address, contacts, photos or precise location. Your progress is stored on your device. To keep the game running and free, the app uses Google Firebase (anonymous statistics and crash reports), Google AdMob (ads) and RevenueCat (purchases). Where the law requires it, you are asked for consent before personalised ads.
Data stored on your device
The app saves your progress (solved levels and lamps), your current board, hint balance, settings such as sound, your ad consent choice and whether you have removed ads. This data stays on your device. It is deleted when you uninstall the app. You can also clear your level progress in Settings, under Reset progress.
Data processed by the services we use
| Service | What it processes | Why |
|---|---|---|
| Google Firebase Analytics | Gameplay events (for example level started or completed, mistakes, hints used, time taken), app version, device model, operating system, language, approximate country derived from IP address, and a random app instance ID. | To see which levels are too hard or too easy and improve the game. Not used to identify you. |
| Google Firebase Crashlytics | Crash reports: stack traces, device model, operating system, app state at the time of the crash and a random installation ID. | To find and fix crashes. |
| Google Firebase Remote Config | A random installation ID, app version, language and country. | To adjust game settings, such as how often ads appear, without an app update. |
| Google AdMob | Advertising identifier (IDFA on iOS, only with your permission; Android advertising ID), IP address, device and app information, and ad interactions. | To show ads, measure them and prevent fraud. Ads are personalised only where you have allowed it. |
| RevenueCat | A random app user ID, purchase receipts and transaction IDs, product, price and country. | To confirm purchases (remove ads, hint packs) and restore them on a new device. |
Payments are handled by Apple (App Store) or Google (Google Play). We never see your card or bank details. Each service processes data under its own privacy policy: Google, Firebase, RevenueCat, Apple.
Ads and consent
- EEA, UK and Switzerland: on first launch the app shows Google's consent form. Personalised ads are shown only if you agree. Until then, and if you decline, Firebase Analytics runs with ad and analytics storage turned off.
- iPhone and iPad: the app asks for tracking permission (App Tracking Transparency) before AdMob can use your advertising identifier. If you decline the consent form, the app does not ask. You can change this any time in iOS Settings, Privacy & Security, Tracking.
- Android: you can reset or delete your advertising ID in Android Settings, Privacy, Ads.
- Change your choice: where Google's consent form applies, open Settings in the app and tap Privacy choices.
- Rewarded ads (an ad in exchange for a hint) are always optional.
- Remove ads: after the one-time purchase the app stops requesting ads.
Legal bases (EEA, UK and Türkiye)
We rely on your consent for personalised ads and for analytics where consent is required; on our legitimate interest in keeping the app stable, secure and free (crash reports, non-personalised ads, fraud prevention); and on the performance of a contract for purchases. For users in Türkiye this is in line with the Personal Data Protection Law No. 6698 (KVKK).
How long data is kept
- On-device data: until you uninstall the app or reset progress.
- Firebase Analytics event data: no longer than 14 months.
- Crashlytics crash reports: 90 days.
- Purchase records at RevenueCat: as long as needed to restore purchases and meet tax and accounting obligations.
- Support messages: up to 12 months after the conversation ends.
International transfers
Google and RevenueCat may process data outside your country, including in the United States. They use safeguards such as the European Commission's Standard Contractual Clauses.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR, KVKK or California law), you can ask to access, correct or delete personal data, object to or restrict processing, withdraw consent, and complain to your data protection authority. We do not sell personal data for money. To opt out of ad personalisation, use the choices listed above.
Because ArrowShift has no accounts, we cannot link the random IDs above to you by name. If you send us a request through the support page, we will explain how to find the identifiers on your device so we can act on it.
Children
ArrowShift is a general audience game and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it.
This website
This website uses no cookies, no analytics and no ads. It is hosted by Netlify, which processes server logs (such as IP address and browser type) to deliver and protect the site. If you use the support form, we receive what you type (your email address and message) and use it only to reply.
Security
Data sent by the app travels over encrypted connections (HTTPS). No method of storage or transmission is completely secure, but we use the protections offered by our providers and collect as little as possible.
Changes
If we change this policy, we will update the date above. Significant changes will also be noted in the app's update notes.
Contact
mobilectapps, Türkiye. Send privacy requests and questions through the support form.