May Be Shared
- Resettable advertising identifiers
- Device model, OS, screen size
- Session frequency and duration
- Ad impressions, clicks, conversions
- Country and language
Privacy Policy
Arrow Off · Effective July 17th, 2026
What Do These Terms Mean?
- Application — Arrow Off and related services
- Company — the operator ("we", "us", "our")
- Personal Information — data that identifies or can be linked to you
- Usage Data — automatically collected interaction and diagnostic data
- Device — any phone, tablet, or computer accessing the App
- Service Provider — a third party processing data on our behalf
- Account — your in-app profile, progress, or session
What Data Do We Gather?
We collect two categories of information: data generated automatically and data you choose to provide.
| Category | Examples | Source |
|---|---|---|
| Usage Data | Arrow puzzle progress, session time, crash logs | Automatic |
| Device Info | Model, OS, app version, screen size | Automatic |
| Identifiers | IP address, GAID, ANDROID_ID | Automatic |
| Ad IDs | GAID / IDFA (with consent) | Consent-based |
| PayPal Info | Email and name for withdrawals | You provide |
Why Do We Need Your Data?
- Gameplay — deliver arrow puzzle features and sync progress
- Accounts — manage registration, authentication, and settings
- Payments — process PayPal withdrawals and prevent fraud
- Support — respond to inquiries and send permitted notices
- Analytics — measure campaigns, study usage, improve stability
- Compliance — meet legal obligations and support business transitions
App Permissions
| Permission | Purpose |
|---|---|
INTERNET | Network access for gameplay, ads, and updates |
ACCESS_NETWORK_STATE | Detect connectivity to optimize performance |
ACCESS_WIFI_STATE | Verify Wi-Fi for stable sessions |
AD_ID | Resettable advertising identifier |
VIBRATE | Haptic feedback during gameplay |
ACCESS_ADSERVICES_TOPICS | Privacy Sandbox Topics API |
ACCESS_ADSERVICES_ATTRIBUTION | Campaign attribution measurement |
BIND_GET_INSTALL_REFERRER_SERVICE | Determine install source |
BIND_APPHUB_SERVICE | Optimize ad delivery |
ACCESS_ADSERVICES_AD_ID | Ad service API compliance |
FOREGROUND_SERVICE | Maintain critical foreground tasks |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Secure internal broadcasts |
Third-Party Services & Ad Partners
Ads are served through AppLovin and its mediation partners.
Never Shared
- Email or phone number
- Account credentials
- Identity-linked progress
- Precise GPS location
- PayPal payout details
Partner Privacy Policies
Data Security
We protect personal information with TLS 1.2+ encryption in transit, role-based access controls, periodic security reviews, and contractual obligations for processors. No system is perfectly secure.
Analytics & Endpoints
Our backend at https://ezkek.arrowoff.com supports gameplay sync, anonymized analytics, performance monitoring, and support.
- TLS 1.2+ on all transfers
- Role-based access for authorized personnel
- Data minimization at each layer
- Regular audits and DPAs with processors
What Can You Do About Your Data?
GDPR (EEA)
- Access
- Rectification
- Erasure
- Restrict Processing
- Object
CCPA / CPRA
- Right to Know
- Right to Delete
- Right to Opt-Out
- Non-Discrimination
VCDPA
- Access
- Correct
- Delete
- Portability
- Opt-Out
Email dr.rosemariemerz@gmaill.com to exercise any right.
Opting Out
Android: Settings → Google → Ads → Opt out of Ads Personalization
iOS: Settings → Privacy & Security → Tracking → Allow Apps to Request to Track (off)
Email dr.rosemariemerz@gmaill.com with subject "Do Not Sell My Personal Information".
Data Retention
Personal information is retained only as needed. Accounts inactive for 90 consecutive days trigger deletion. Anonymized usage data may be kept for analytics.
International Transfers
Your information may be processed outside your country. We apply encryption and contractual safeguards for equivalent protection.
Children's Privacy
Arrow Off is not directed to children under 13. Contact us to request prompt deletion if a child provided information.
Disclosure Requirements
- Business transactions — data may transfer during mergers or acquisitions
- Law enforcement — disclosure when compelled by valid legal process
- Safety — to protect rights, investigate abuse, or prevent harm
Third-Party Links
External sites linked from the App have their own privacy policies. Review them before sharing personal information.
Data Protection Officer
Privacy compliance inquiries may be directed to our DPO at dr.rosemariemerz@gmaill.com.
Changes to This Policy
- Updates are posted here with a revised effective date
- Material changes may be announced by email or in-app notice
- Continued use after changes constitutes acceptance