Privacy Policy

01The short version

Arroway is a single-player puzzle game. It does not ask who you are, has no accounts and no profiles. Your progress lives on your device; what leaves it is information about how the game is played, whether it crashed, and what is needed to show child-safe, non-personalised ads — none of it tied to who you are.

This policy explains that in full, including the things we deliberately do not do.

02What we collect

Nothing that identifies you personally. We do not collect your name, email address, phone number, contacts, photos, precise location, or your device’s advertising ID.

What we do collect is described under Analytics, Crash reports and Notifications below: information about how the game is played and how it is running, linked only to random identifiers for this installation of the app. There is no account to attach it to, so there is no database of players to breach, sell, or hand over.

03What is stored on your device

So the game can pick up where you left off, it saves the following in this app’s private storage, readable only by Arroway:

• Campaign progress — levels cleared, stars, moves and best times.
• Your wallet — coins and hints earned in play.
• Lives, and the timestamps used to work out when the next one returns.
• Daily puzzle results and your current streak.
• Achievements you have unlocked.
• Preferences — music, sound effects, haptics, reduce motion, high contrast, appearance and reminders.

04Backups

Your save is included in your device’s own backup, so reinstalling the game or setting up a new phone brings your progress with it. That backup is made by Android and stored in your Google account, under your control and subject to Google’s terms — we never see it, and turning device backup off stops it entirely.

Settings › Backup also lets you take a copy yourself and put it back later. That copy goes wherever you send it and nowhere else; it contains levels, stars, coins, streak and settings, and nothing that identifies you.

05Analytics

The game reports how it is played — a level started, a level finished with its stars, mistakes and time, a daily puzzle completed, an achievement unlocked — using Google Analytics for Firebase. It is how we find out which levels are too hard or where players stop.

Alongside those events, Firebase records basic technical details — device model, Android version, app version and language — and an approximate region such as your country or city, which Google works out from the network connection. Events are grouped under a random identifier for this installation; it is not linked to a name, email, account or advertising ID, and a reinstall replaces it. So what arrives is “someone cleared level 42 with two stars”, never who.

Google processes this on our behalf as a service provider, under the Firebase terms. We do not sell it or share it with anyone else.

06Crash reports

When the game crashes or a screen fails, Firebase Crashlytics sends us a report: what went wrong, where in the code, and what kind of device it happened on. Without it a crash that only happens on one phone is invisible to us.

A crash report carries a random identifier for the installation, so repeated crashes on one phone can be grouped — but no name, email or account, because there is none to carry.

07Advertising

Arroway is free, and it is paid for by ads served through Google AdMob. They appear in three places: a banner on the home screen, a full-screen ad between levels after every few completed levels (never during a puzzle, and never in a new player’s first levels), and optional videos you choose to watch for a reward such as a heart, a hint or double coins.

Every ad request is marked as directed at children and as non-personalised, and ads are limited to content suitable for general audiences. That means ads are not chosen based on your behaviour or interests, and no profile of you is built for advertising. The game does not read your device’s advertising ID — the permission to do so is removed from the app.

To deliver and measure ads, and to prevent fraud, Google receives technical information such as your IP address (from which an approximate location can be worked out), device type, operating system and app version, and how you interacted with an ad. Google handles this as described in its privacy policy (policies.google.com/privacy) and in “How Google uses information from apps that use our services” (policies.google.com/technologies/partner-sites).

Where the law requires it, such as in the European Economic Area and the United Kingdom, the app asks for your consent before ads load.

08Purchases

There is currently nothing to buy in Arroway.

If in-app purchases are added, they will be processed entirely by the App Store or Google Play. Those stores handle the payment and tell the app only whether a purchase succeeded — your card details never reach us, because they never pass through the game.

09Notifications

Arroway can send two kinds of notification, and neither is sent until you allow notifications on your phone.

Reminders — that your hearts are full, or that today's puzzle is waiting — are scheduled by your phone itself, from progress that never leaves the device.

Announcements and event news are sent through Firebase Cloud Messaging, a Google service. To receive them, your phone is given a random notification token that identifies the installation, not you; it contains no name, email or account, because Arroway has none of those to give.

Turning Notifications off in the app's Settings cancels every reminder and deletes that token, so no further messages can reach the phone. You can also block notifications at any time in your phone's system settings.

10Services we use

Arroway uses Google Firebase, provided by Google LLC, for the features described above. Google acts as our service provider and handles this information under its own privacy policy and the Firebase terms:

• Google Analytics for Firebase — how the game is played.
• Firebase Crashlytics — crash reports.
• Firebase Cloud Messaging — announcements, if you allow notifications.
• Firebase Remote Config — game settings we can adjust without an update.
• Google AdMob — the ads described under Advertising.
• Google’s privacy policy: policies.google.com/privacy
• How Firebase handles data: firebase.google.com/support/privacy

11Permissions and network access

Arroway is fully playable offline, and nothing about your progress is uploaded. The app uses the network for five things: sending the anonymous analytics and crash reports described above, fetching the settings that let us tune the game without an update, receiving notifications if you allow them, loading ads, and opening external links such as the store page or your mail app.

Opening one of those links hands you over to that app or website, which has its own privacy policy.

12Children

Arroway is suitable for all ages and is designed to be safe for children: there is no chat, no social feature, and nothing collected that identifies who a player is. Ads are child-directed, non-personalised and limited to general-audience content, as required by Google Play’s Families policy.

We do not knowingly collect personal information from anyone, children included — there is no account, no sign-in and no mechanism in the app by which we could.

13How long information is kept

Your saved progress stays on your device until you reset it or uninstall the game.

• Analytics events are kept for the retention period set in our Google Analytics account, and then deleted.
• Crash reports are kept by Firebase Crashlytics for 90 days.
• The notification token is deleted when you turn Notifications off, and stops working if the app is uninstalled or not opened for a long time.

14Your data, your control

Because everything is local, you are in complete control of it and no request to us is required:

• Settings › Reset all progress erases every level, star, coin and achievement immediately.
• Uninstalling the app removes all of its stored data from your device.
• A copy may remain in your device’s backup, which is yours: Android’s own settings control it, and deleting the backup there removes it.
• Settings › Notifications off cancels every reminder and deletes the notification token.
• Analytics and crash data are not linked to your identity, so we cannot look up one player’s records — and reinstalling the app gives it new random identifiers.

15Your privacy rights

Depending on where you live — including under the GDPR in Europe, the UK GDPR, California’s CCPA and India’s Digital Personal Data Protection Act — you may have the right to access, correct or delete personal information about you, or to object to how it is used.

Arroway is built to hold as little as possible: there is no account, and analytics and crash data are not linked to your name, email or identity. That means we usually cannot find records belonging to a specific person, but if you have a request or a concern, contact us and we will help however we can. You may also complain to your local data protection authority.

16Changes to this policy

If the way Arroway handles data changes — for example if purchases are introduced — this policy will be updated in the same release, and the date at the top of this screen will change with it.

17Contact

Questions about privacy, or about anything in this policy, are welcome. We answer every one.