Privacy Policy

This Privacy Policy governs the mobile game Arrow Puzzle (also released under related titles including Arrow Rush, Arrow Puzzle - Tap Puzzle Game and Arrow Escape), published and operated by Gree Web Solutions (“we”, “our”, or “us”). It applies to:

• The Android app distributed through Google Play under the package identifier com.arrowcrackers.game.
• The iOS app of the same name distributed through the Apple App Store for iPhone and iPad.

Arrow Puzzle is a casual, logic-based tap puzzle game built with the Flutter and Flame game engines. Both platform versions are built from the same code base and share the same data practices; where Android and iOS differ (system permissions, advertising identifiers, store disclosures), this policy describes each platform separately.

This document describes:

• The on-device local storage used to preserve your puzzle progression and settings.
• The Android permissions and iOS system prompts the app uses and why each is needed.
• The advertising SDKs integrated (Google AdMob and Google Ad Manager / Google Ad Exchange (AdX)) and how ads are served.
• The Firebase services used for analytics, crash reporting, push notifications and remote ad configuration.
• Our Google Play Data Safety and Apple App Privacy disclosures.
• Your rights and options under international privacy laws (GDPR, UK GDPR, Swiss FADP, CCPA/CPRA and other US state laws, and COPPA).

We practice data minimization. As the game developer, we maintain no user accounts, profile databases, or personal tracking servers of our own. Specifically:

Arrow Puzzle generates and manages all level layouts locally on your device. Your progress, records, and preferences are stored exclusively on your device using the platform’s native key-value storage through the Flutter shared_preferences plugin (SharedPreferences on Android, NSUserDefaults on iOS). This data never leaves your device and is not uploaded to our servers:

• Level Progression & Scores: Current journey level, highest unlocked stage, total cumulative score, and per-level results (1–3 star ratings, moves used, completion scores).
• Virtual Economy: In-game coin balance, hint count and remaining lives (earned from stage clears, daily puzzles or optional rewarded ads and used for hints and retries).
• Daily Challenge & Streaks: Daily puzzle completion date, current daily streak count, consecutive play-day streak and last played date.
• Audio & Haptic Preferences: Sound effects, background music and vibration toggles.
• Visual, Language & Tutorial Settings: Selected theme mode (System, Light or Dark), chosen game language, language onboarding flag, and tutorial / intro guidance flags.
• Notification Preferences: Whether reminders are enabled and whether the notification permission has already been requested.
• Advertising Housekeeping: A random traffic-bucket number (0–99) that decides which Google ad network the app tries first, the consent choices stored by the Google UMP SDK, and the ad frequency settings last received from our remote configuration.

To provide Arrow Puzzle as a free game without purchases or subscriptions, we display advertisements through the Google Mobile Ads SDK. Ads are requested from two Google advertising networks, in an order controlled by our remote configuration: Google AdMob and Google Ad Manager (serving Google Ad Exchange, “AdX”, demand). If the first network has no ad available, the second is tried. Both networks are operated by Google LLC and are subject to the same Google privacy policy and consent controls. Advertisements are labelled as such and are always shown on top of the game rather than inside puzzle content. The maximum ad content rating is set to “T” (Teen), so mature ad categories are never requested.

A. Ad Formats Used in the Game

• App Open Ads: A full-screen ad that may appear when the game is launched or brought back to the foreground after a period of inactivity.
• Adaptive Banner Ads: Displayed at the bottom of menu, level-select and gameplay screens without obstructing the puzzle board.
• Native Ads: Ads styled to match the game’s interface (for example on the level-complete screen), always marked with an “Ad” label.
• Interstitial Ads: Full-screen static or video ads shown at natural transition points, such as after completing a level. The minimum gap between interstitials and the number of actions between them are limited by our remote frequency settings.
• Rewarded Video Ads: Strictly voluntary and user-initiated. You are shown an offer first and may decline it; if you accept and watch the ad, you receive an in-game reward such as extra coins, hints, restored lives or a continue.

B. Data Collected & Processed by the Advertising SDK

In accordance with Google Play and Apple App Store developer policies, the Google Mobile Ads SDK processes the following technical data:

C. Purposes of Processing Advertising Data

• Ad Serving & Rendering: Requesting and displaying ad creatives from AdMob and Ad Manager / AdX.
• Personalization (Consent Required): Delivering ads based on inferred interests only when you have given consent (EEA/UK/CH), not opted out (US states) and, on iOS, allowed tracking.
• Contextual Ad Delivery: Serving non-personalized ads when personalized targeting is declined.
• Frequency Capping: Limiting repetitive ads to keep gameplay pleasant.
• Fraud Detection & Invalid Traffic Prevention: Protecting against automated clicks and malicious activity.
• Attribution & Rewarded Verification: Confirming rewarded ad completions so in-game items can be credited, and measuring campaign performance (via SKAdNetwork on iOS).
• Revenue Reporting: Recording estimated ad revenue per placement and network so we can compare how AdMob and AdX perform.

D. Ad Network Configuration & app-ads.txt

Which ad units and networks the game uses can be adjusted remotely (see Section 6D) so that we can fix ad problems without shipping an update. Our authorized sellers are published in the app-ads.txt file on this website, in line with the IAB Tech Lab standard, so that only authorised Google accounts can sell our inventory.

Arrow Puzzle integrates the following Firebase services, provided by Google LLC, on both Android and iOS:

The following table summarizes our Android data disclosures in accordance with the Google Play Data Safety requirements:

Data deletion: Because no account exists and all gameplay data is stored on your device, deleting the app removes your data. Data held by Google (advertising, analytics and crash telemetry) is pseudonymous and subject to Google’s retention periods; you can reset your Advertising ID at any time (Section 10) to disconnect future data from past data.

The iOS version of Arrow Puzzle is subject to Apple’s App Store Review Guidelines and the App Privacy Details (“privacy nutrition label”) shown on our App Store product page. The label reflects the same SDKs described above and is summarised here:

Because the iOS app includes the NSUserTrackingUsageDescription entry and may request tracking permission, our App Store App Privacy response declares that Identifiers (Device ID) and Usage Data (Product Interaction, Advertising Data) are collected and used to track you across apps and websites owned by other companies, together with Coarse Location and Diagnostics that are collected but not used for tracking. All of this data is collected by the Google Mobile Ads SDK and Firebase, not linked to your identity, and only used for tracking when you allow it.

We comply with global data protection frameworks. The consent flow runs on every launch, before any ad is requested, on both Android and iOS:

A. European Economic Area (EEA), UK & Switzerland (GDPR / UK GDPR / Swiss FADP)

For players in the European Economic Area, the United Kingdom and Switzerland, we use the Google User Messaging Platform (UMP) SDK, certified under the IAB Europe Transparency and Consent Framework (TCF v2.2):

• On first launch a consent dialogue is presented where you can consent, manage options per purpose and vendor, or decline consent for advertising identifiers and partner data processing.
• No ad request is sent until the consent flow has completed; personalized ads are only requested with valid consent.
• Your choice is also passed to Firebase Analytics through Google Consent Mode v2, so analytics and ad-related storage follow the same decision.
• In-App Privacy Options: You can review or withdraw your consent at any time inside the app via Settings > “Privacy Options”, which re-opens the Google UMP consent form.
• Legal bases: consent (personalized advertising and analytics), legitimate interest (fraud prevention, crash reporting, serving non-personalized ads to fund the free game) and performance of the game itself (local storage, remote ad configuration).
• Your rights: access, rectification, erasure, restriction, portability and objection. Because we hold no personal data ourselves, most rights are exercised by resetting your advertising identifier and deleting the app; for anything else contact us (Section 15). You also have the right to lodge a complaint with your local supervisory authority.

B. United States State Privacy Laws (California CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA and others)

Under the California Consumer Privacy Act (as amended by the CPRA) and comparable US state privacy laws, residents have rights regarding the collection, deletion and “sale” or “sharing” of personal information for cross-context behavioral advertising:

• We do not sell personal data for monetary payment.
• Transmitting pseudonymous advertising identifiers to Google’s ad networks for targeted ads may be treated as “sharing” under applicable laws.
• In regulated US states the app shows Google’s US state regulations message (IAB Global Privacy Platform) and the in-game Settings screen displays a “Do Not Sell or Share My Personal Information” link that opens the opt-out form at any time.
• You can also opt out via the system-level ad settings described in Section 10. We will not discriminate against you for exercising your rights.
• We honour Global Privacy Control (GPC) and other recognized opt-out preference signals where the platform makes them available.

C. Other Regions

Players in other regions (including Brazil under the LGPD, Canada under PIPEDA and India under the DPDP Act) receive the same protections: consent can be managed through the platform ad settings and the in-game controls in Section 10, and you may contact us to exercise any right available under your local law.

You can manage, reset or disable personalized advertising using the following methods:

Arrow Puzzle is designed as a general-audience casual logic game. It is not directed to children under 13 years of age (or the minimum age of digital consent in your jurisdiction, e.g. 16 in parts of the EEA), is not enrolled in the Google Play “Designed for Families” programme or the Apple App Store Kids Category, and we do not knowingly collect personal information from children.

Consistent with a general-audience classification, our advertising configuration follows the standard Google AdMob and Google Ad Manager policies, with the maximum ad content rating limited to “T”. If you are a parent or guardian and believe that personal data of a minor has been collected inadvertently, please contact us at info@greewebsolutions.com so we can take immediate corrective measures, including asking Google to delete the associated pseudonymous data.

A. Encryption in Transit

All network interactions between Arrow Puzzle and third-party endpoints (Google AdMob, Google Ad Manager, Firebase Analytics, Crashlytics, Cloud Messaging and Realtime Database) use industry-standard Transport Layer Security (TLS / HTTPS). On iOS, App Transport Security enforces this at the operating-system level.

B. Data Retention

• Local Progress: Retained on your device until you clear app storage (Android) or delete the app (Android / iOS).
• Advertising Telemetry: Retained by Google in accordance with the Google advertising data retention policies (typically 14 to 90 days for raw logs, up to 14 months for aggregated metrics).
• Analytics Data: Firebase Analytics event data is retained for up to 14 months, after which it is aggregated.
• Crash Reports: Firebase Crashlytics retains crash data for 90 days.
• Push Tokens: Firebase Cloud Messaging registration tokens are kept until the app is deleted, notifications are disabled, or the token expires and is rotated.

C. International Transfers

Google may process the data described above on servers located outside your country, including in the United States. Google LLC participates in the EU-US Data Privacy Framework and relies on Standard Contractual Clauses for other transfers; see the Google privacy resources in Section 13.

For complete information regarding the data processing policies of our integrated partners and distribution platforms, please review their official privacy pages:

We may periodically update this Privacy Policy to reflect changes in application features, integrated SDK versions, legal requirements, or Google Play and Apple App Store guidelines.

Whenever changes are published, the “Last Updated” date at the top of this page will be revised accordingly. Material changes will also be reflected in the Google Play Data Safety section and the App Store App Privacy details. We encourage players to review this page occasionally.

If you have questions, inquiries, requests to exercise your privacy rights, or feedback regarding this Privacy Policy, please reach out to us: