Effective date: 2026-10-20
Developer (data controller): Gayen BD, Dhaka, Bangladesh
Contact: gayenbd@gmail.com
This policy explains what information the mobile game Arrow Escape: Tap Puzzle ("the game", "we", "us") collects, why, who we share it with, and the choices you have. We wrote it to be short and readable. If anything is unclear, email us at gayenbd@gmail.com.
Summary
- You don't need an account. We never ask for your name, email, phone number, contacts, photos or precise location.
- Your progress, coins and settings are stored on your device. We don't run our own servers.
- We use Google Firebase to understand how the game is played (for example, which levels are too hard), to fix crashes, and to adjust game settings without an app update.
- The game is free and shows ads. Unity LevelPlay picks which ad to show, and the ads come from Unity Ads, Google AdMob and other buyers that bid through them. These partners use your device's advertising ID and similar data to show and measure ads. Where the law requires it, we ask for your consent first, and you can change your choice later.
- Purchases are processed by Apple or Google. We never see your payment details.
- To ask for a copy of your data or for its deletion, email us your Support ID from Settings › About (see Your choices).
- The game is not directed at children under 13.
Information we collect
Information stored only on your device. This is never sent to us: level progress, stars, coins, boosters, settings, your consent choices, the timing of the last ad (so ads aren't shown too often), and a short record of each purchase (product and transaction ID) so a purchase is never granted twice and Remove Ads can be restored.
Information collected when you play. This is sent to Google Firebase (our service provider) or to our ad partners:
| What | Examples | Why | Who receives it |
|---|---|---|---|
| Game usage | levels started, completed or failed; boosters used; coins earned or spent; screens opened; settings changed; sessions | Improve difficulty and the game (analytics) | Google Firebase |
| Crash and performance data | crash stack traces, device model, OS version, app version, app state at the time of the crash | Fix bugs and keep the game stable | Google Firebase Crashlytics. The ad partners' software also reports its own diagnostics to them. |
| Purchase information | product bought, price, currency, transaction ID | Revenue analytics. Delivering and restoring purchases is handled on your device and by the store. | Google Firebase (analytics). Apple or Google process the payment itself. |
| Device identifiers | identifiers created by Firebase for this installation of the game; your device's advertising ID (Android advertising ID; on iPhone and iPad, Apple's IDFA only if you allow tracking) | Analytics and crash grouping (Firebase IDs); showing, capping and measuring ads and preventing ad fraud (advertising ID) | Firebase receives only its own IDs. Firebase does not receive your advertising ID. Ad partners receive the advertising ID. |
| Approximate location | country or region worked out from your IP address | Choose the right consent message; ads and fraud prevention; analytics and game settings by country | Google (consent tool, Firebase); ad partners |
| Ad interactions | ads shown, clicked or watched; rewards granted; revenue per ad | Deliver rewards; measure ads; analytics | Ad partners; Firebase |
| Consent choices | whether you agreed to personalised ads or tracking, and your region | Respect your choices; show that we comply with the law | Stored on your device; a summary is sent to Firebase if analytics is allowed |
We do not collect: names, email addresses, phone numbers, postal addresses, contacts, photos, videos, audio, files, precise GPS location, health data, messages, browsing or search history, or payment card or bank details. The game has no accounts, chat or social features.
We do not store purchase data beyond what the stores need to process and restore your purchases and what the game needs to avoid granting a purchase twice. We don't keep receipts or payment details.
How we use information
| Purpose | Data | Legal basis (EEA, UK, Switzerland) |
|---|---|---|
| Running the game and delivering and restoring purchases | local save data, purchase record on your device | Performance of a contract (our Terms) |
| Crash reporting and stability | crash and performance data, Firebase IDs | Legitimate interests (keeping the game working), using minimal data and never for advertising |
| Game settings delivered remotely (tuning difficulty, rewards and ad frequency without an update) | Firebase installation ID, country, language, OS and app version | Legitimate interests |
| Game analytics | game usage, purchase information, ad interactions, Firebase IDs | Consent where our consent message asks for it; otherwise legitimate interests |
| Personalised advertising and ad measurement | advertising ID, approximate location, ad interactions, diagnostics | Consent (the consent message in the EEA, UK and Switzerland; on iPhone and iPad, Apple's tracking permission) |
| Non-personalised ads, fraud prevention and limiting how often ads appear | as above, limited | Legitimate interests, where the law allows |
| Legal compliance | consent records | Legal obligation |
We use a single Firebase project for the game. Analytics is set up without Google Signals, without ad personalisation, without links to Google Ads, and without any user ID.
We do not sell your personal information for money. Some US state laws treat sharing data with ad partners for cross-context behavioural advertising as "selling" or "sharing". See California and other US states.
Consent, tracking and ads
- Before anything is sent: when you first open the game, Google's consent tool (the User Messaging Platform) checks your region. Until that consent step is finished, the game sends no analytics, crash reports or ad requests.
- Consent message: if you're in a region where the law requires it (for example the EEA, UK or Switzerland), the game shows Google's consent message. Game analytics then starts only if you allow it, and ads are personalised only if you agree.
- After the consent step: crash reporting and remote game settings start whatever you chose, because they keep the game working. Ads start after the consent step (and, on iPhone and iPad, after the tracking question).
- Regions without a consent message (for example the Philippines, Canada and New Zealand): analytics and personalised ads are on by default. You can limit ad personalisation through your device settings, as described below.
- iPhone and iPad: on the Home screen, after the consent message, we show a short explanation and then Apple's "Allow tracking?" question, once. If you choose "Ask App Not to Track", the advertising identifier (IDFA) is not available to us or our partners. The game works the same either way.
- Changing your mind:
- In the game: Settings › Privacy settings reopens the consent message. This row appears only in regions where the consent tool offers it.
- On iPhone and iPad: iOS Settings › Privacy & Security › Tracking.
- On Android: delete or reset your advertising ID in your device settings (usually Settings › Privacy › Ads, or Settings › Google › Ads).
- Ads you'll see: rewarded ads are optional; you choose to watch them for a reward such as extra coins or a hint. Interstitial (full-screen) ads may appear after you win a level, never during play or when you fail. Banner ads may appear on the Home and level-select screens. Buying Remove Ads removes interstitial and banner ads; optional rewarded ads stay available.
- Ad content: we limit Google AdMob to ads rated suitable for general audiences with parental guidance (PG) and below, and we monitor the ads shown through Unity's ad-quality tools. If you see an inappropriate ad, please tell us at gayenbd@gmail.com.
Who we share information with
Service provider (processes data on our behalf, under contract):
- Google Firebase (Analytics, Crashlytics, Remote Config, Installations). Privacy and security: https://firebase.google.com/support/privacy · Google Privacy Policy: https://policies.google.com/privacy
Advertising partners (receive data to show and measure ads, and may use it for their own purposes under their own policies):
- Unity Technologies, for Unity LevelPlay (the mediation service that decides which ad to show), Unity Ads, and the ironSource SDK included in LevelPlay, which carries ad demand from the ironSource Exchange. ironSource is part of Unity. Privacy policy: https://unity.com/legal/game-player-and-app-user-privacy-policy. Unity Ads also shows a privacy icon in its ads, where you can see your choices.
- Google AdMob, including Google's consent tool. How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites · Google Privacy Policy: https://policies.google.com/privacy
- Other ad buyers that bid for ad space through Unity LevelPlay or Google AdMob. Where we show a consent message, it lists these partners and lets you choose.
App stores: Apple (https://www.apple.com/legal/privacy/) and Google Play (https://policies.google.com/privacy) process your purchases and payments as independent controllers.
Legal reasons: if required by law, or to protect rights, safety and security.
Business transfers: if the game is sold or transferred, this information may go to the new owner, who must respect this policy.
International transfers
We are based in Bangladesh, and we handle support and privacy emails from there. Our partners may process data in the United States, Israel and other countries outside your own. This applies to players in every country, including Canada, New Zealand and the Philippines. Where EEA, UK or Swiss law applies, these transfers rely on safeguards provided by our partners, such as the European Commission's Standard Contractual Clauses, adequacy decisions or the EU-US Data Privacy Framework. We choose partners that protect data to a standard comparable to the law where you live.
How long we keep information
- Analytics data (Google Analytics for Firebase): event-level data is kept for 2 months. Reports that only show totals and no individual player may be kept longer.
- Crash reports (Firebase Crashlytics): kept for 90 days, then deleted.
- Firebase installation IDs: kept until we ask Firebase to delete them, which we do when you send a deletion request. Firebase then removes them from its systems within 180 days.
- Ad partner data: as described in each partner's privacy policy (linked above).
- Data on your device: until you uninstall the game.
Your choices
Everyone can:
- Turn off personalised ads and tracking as described in Consent, tracking and ads.
- Find your Support ID: open Settings › About in the game. Because the game has no accounts, the Support ID is how we find the data linked to your copy of the game. If it says "No analytics data collected" instead, the game hasn't sent any analytics data from your device, so there is no analytics data to access or delete.
- Ask for deletion: email gayenbd@gmail.com with the subject "Delete my data" and include your Support ID. We will delete the analytics data and installation ID linked to it within 30 days. Crash reports are deleted automatically after 90 days. Uninstalling the game deletes everything stored on your device. For data held by ad partners, reset or delete your advertising ID and use the partners' own tools linked above.
- Ask for access or correction: email gayenbd@gmail.com with the subject "My data" and your Support ID, and we'll tell you what we hold. Because we don't collect names or emails, we can't find your data without the Support ID.
- We'll answer from the email address you write from and use it only to handle your request.
EEA, UK and Switzerland
Under the GDPR, the UK GDPR and the Swiss data protection law, you have the right to access, rectify, erase and restrict your personal data, to object to processing (including processing based on legitimate interests), to data portability, and to withdraw consent at any time. Withdrawing consent doesn't affect processing that happened before. To use these rights, see Your choices. You can also complain to your local data protection authority. In the UK, that is the Information Commission (ICO): https://ico.org.uk.
California and other US states
This section applies to residents of California and other US states with similar privacy laws (CCPA/CPRA and similar laws).
- Categories collected in the last 12 months: identifiers (Firebase IDs and the advertising ID); commercial information (purchase history); internet or other electronic network activity (game usage and ad interactions); approximate location. Sources: your device and the game. Purposes: see How we use information. Retention: see How long we keep information.
- Disclosed to: our service provider (Google Firebase) and our advertising partners (see Who we share information with).
- Selling or sharing: we don't sell personal information for money. Giving advertising IDs and ad interactions to ad partners may count as "selling" or "sharing" for cross-context behavioural advertising. To opt out, use Settings › Privacy settings in the game, turn off tracking in iOS settings, or delete or reset your advertising ID on Android.
- Sensitive personal information: not collected.
- Your rights: you may ask to know, access, delete or correct your personal information, and we won't discriminate against you for using these rights. Send requests to gayenbd@gmail.com with your Support ID, which is how we verify a request. An authorised agent may send a request for you.
Canada
Under PIPEDA and provincial laws, including Quebec's Law 25, you may access and correct your personal information and withdraw consent, subject to legal limits. Our person responsible for privacy is Privacy Officer, Gayen BD, reachable at gayenbd@gmail.com. You may complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (https://www.cai.gouv.qc.ca).
Profiling for ads: the game uses technology that lets our ad partners recognise your device by its advertising ID and show you personalised ads. In Canada, the game doesn't show a consent message, so this is on by default on Android. On iPhone and iPad it stays off unless you choose "Allow" when the game asks about tracking. You can turn it off at any time: on Android, delete or reset your advertising ID in your device settings; on iPhone and iPad, turn off tracking for the game in iOS Settings › Privacy & Security › Tracking. You will still see ads, but they won't be based on your advertising ID.
New Zealand
Under the Privacy Act 2020, you may ask to access and correct your personal information. Please contact us first at gayenbd@gmail.com. If we can't resolve your concern, you may complain to the Office of the Privacy Commissioner (https://www.privacy.org.nz).
Philippines
Under the Data Privacy Act of 2012, you have the rights to be informed, to access, to object, to rectify, to erase or block, to data portability, and to damages. You may file a complaint with the National Privacy Commission (https://privacy.gov.ph).
Bangladesh
We are based in Bangladesh. If Bangladesh's personal data protection law applies to your data, you have the right to access your personal data (including a summary of how it is processed and who it is disclosed to), to have it corrected or updated, to have it erased in the cases the law allows, to receive it in a portable form, and to withdraw your consent at any time, in whole or in part. To use these rights, see Your choices. You may also complain to the data protection authority established under that law. If Bangladeshi law treats you as a child, a parent or guardian must agree before you use the game.
Children
The game's content is rated suitable for all ages (Everyone / 4+). That rating describes the content only: the game is designed for adults and is not directed at children under 13, or under the minimum age for consent in your country (for example 16 in parts of the EEA). We don't knowingly collect personal information from children. If you believe a child has given us personal information through the game, contact gayenbd@gmail.com and we will delete it.
Security
Data sent by the game is encrypted in transit (HTTPS/TLS). Data on your device is protected by your device's security, and the game's save file includes a tamper check. No method is 100% secure, but we limit what we collect to what the game needs.
Changes to this policy
We'll post any changes on this page and update the effective date. If the changes are significant, we'll also tell you in the game.
Contact us
Gayen BD, Dhaka, Bangladesh, gayenbd@gmail.com