Arrows Go! Privacy Policy

1. Introduction

Shanghai Shiguang Box Technology Co., Ltd, operating the Yaha Games brand ("we", "us", or "our"), provides Arrows Go!, including the Android application with package name com.pauselab.geoescape.game and any browser version that links to this policy (collectively, the "Game"). This Privacy Policy explains what information the Game processes, why it is processed, how it is shared, and the choices available to users.

2. Information we process

2.1 Information stored on your device

The Game stores gameplay and preference data locally, including level progress and results, unlocked modes, language, theme, sound and vibration settings, tutorial state, legal acceptance, and advertising cooldown or reward state. This data is used to save your progress and operate the Game. We do not receive this local data unless you choose to send it to us, for example in a support request.

Android or browser backup and synchronization features may copy or restore local data according to your device, browser, or platform settings. You can remove local data through the applicable device or browser controls, or by uninstalling the application where applicable.

2.2 Analytics data in the Android version

The Android version uses Google Analytics for Firebase. Firebase may automatically process:

  • a pseudonymous app-instance identifier and, where available, the Android Advertising ID;
  • masked IP address and approximate location derived from it;
  • device and app information, such as device type, operating system, app version, language, and region; and
  • app lifecycle and usage information, such as first open, sessions, screen views, and engagement time.

We also send gameplay events that describe how the Game is used, including:

  • screen and feature entry, game mode, level number, difficulty, attempt, outcome, elapsed time, and progress;
  • tutorial, hint, revive, booster, achievement, settings, and legal-consent actions;
  • advertising request, availability, placement, and result; and
  • in-app review requests and store-listing opens.

These events are designed not to include your name, email address, account credentials, message contents, payment information, or a developer-created user ID. The browser version does not use Firebase Analytics.

2.3 Advertising data in the Android version

The Android version uses the Google Mobile Ads SDK (AdMob) to provide interstitial ads after certain failed-game restarts and optional rewarded ads for features such as revives, hints, or boosters. Banner ads are not currently used.

Google states that the Mobile Ads SDK may automatically collect and share data for advertising, analytics, and fraud-prevention purposes, including:

  • IP address, which may be used to estimate general location;
  • user product interactions, such as app launches, taps, and video views;
  • diagnostic information, such as app launch time, hang rate, and energy usage; and
  • device or account identifiers, including the Android Advertising ID, app set ID, and other applicable device identifiers.

We may receive aggregated advertising performance and revenue reports, together with business events such as whether an ad was requested, shown, closed, or rewarded. Ads may be personalized or non-personalized depending on applicable law, your consent and device choices, and Google's settings.

2.4 Google Play reviews

The Game can request the Google Play In-App Review flow or open its Google Play store listing. We record only the request and technical result of that flow for product measurement. We do not receive through the Game whether you submitted a review or the rating or text you provided. Reviews submitted to Google Play are processed by Google under Google's policies.

2.5 Information you provide voluntarily

If you contact us, we process the information you choose to provide, such as your email address, message, screenshots, device details, and support history, to respond to your request. The Game does not provide user accounts, purchases, payment processing, cloud save, or social posting.

2.6 Browser and website information

The browser version uses local storage to save progress and settings and does not request AdMob ads or send Firebase Analytics events. The website or hosting provider that delivers the browser version may process standard server logs, such as IP address, browser type, requested page, and date and time, for delivery, security, and diagnostics. Website cookies and other site features are governed by the applicable website notice.

3. How we use information

We process information to:

  • provide, save, secure, troubleshoot, and improve the Game;
  • understand gameplay funnels, balance levels, and measure feature performance;
  • deliver, measure, and prevent fraud in advertising;
  • operate rewarded-ad and advertising-frequency rules;
  • handle reviews, support requests, and legal inquiries; and
  • comply with law and enforce our Terms of Service.

Where applicable, we rely on performance of our agreement with you, our legitimate interests in operating and improving the Game, your consent, and compliance with legal obligations. The available legal basis can vary by jurisdiction and purpose.

4. How we share information

We do not sell personal information for money. We disclose information only as described in this policy:

  • Google LLC: Google Analytics for Firebase for app measurement; Google Mobile Ads for advertising, analytics, and fraud prevention; and Google Play services for distribution and review features. Google may process information globally under its own terms and privacy policy.
  • Service providers: hosting, security, technical, or support providers that process information for us under appropriate contractual obligations.
  • Legal and safety reasons: when reasonably necessary to comply with law, legal process, enforceable government requests, protect rights and safety, investigate fraud or abuse, or enforce our terms.
  • Business changes: as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable legal safeguards.

Google Mobile Ads' advertising disclosures may qualify as "sharing", "targeted advertising", or a similar concept under some privacy laws even when no money is exchanged for the data.

5. Retention

Local gameplay data remains on your device until it is cleared, overwritten, or removed, although a platform backup may restore it. Analytics, advertising, support, and legal records are retained only for as long as reasonably needed for the purposes described above, subject to configured Google retention controls, legal requirements, fraud prevention, and dispute resolution. Google applies its own retention practices to data it processes independently.

6. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to complain to a data-protection authority.

You can also:

  • clear the Game's local data through Android or browser settings, or uninstall the Game;
  • reset or delete the Android Advertising ID and manage ad-personalization controls in Android and Google settings;
  • use any consent or privacy controls presented by Google for advertising; and
  • contact us to exercise a privacy right concerning information controlled by Yaha Games.

Because the Game has no account and does not create a directly identifying user ID, we may need information from you to locate a record, and in some cases we may be unable to associate an anonymous record with you. Withdrawing consent does not affect processing that occurred before withdrawal. No account-deletion flow is required because the current Game does not create user accounts.

7. Security

We use reasonable administrative and technical safeguards appropriate to the nature of the information. Google states that data collected by its Analytics and Mobile Ads SDKs is encrypted in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International processing

Yaha Games and its providers, including Google, may process information in countries other than the country where you live. Where required, we use legally recognized safeguards for international transfers.

9. Children's privacy

The Game is not directed to children under 16. We do not knowingly request names, email addresses, or other directly identifying information from children through the Game. If you are a parent or guardian and believe a child has provided personal information to us, contact us and we will take appropriate steps. Store age ratings and target-audience declarations must be followed in addition to this policy.

10. Third-party services and links

Third-party services are governed by their own terms and policies. Relevant information includes:

11. Changes to this policy

We may update this policy to reflect changes to the Game, third-party services, or law. We will post the updated policy at the public URL above and revise the "Last updated" date. Where required, we will provide additional notice or obtain consent.

12. Contact us