Privacy policy.

1. Who we are and what this policy covers

Gaming Arena Social operates Arrow Out: Sand Puzzle (the “Game”). This policy covers personal information processed by the Game on Android and iOS, our related account services, and player-support requests. The Android package and intended iOS bundle identifier are com.arrowout.sandpuzzle.

The Game is in development. Features and data processing depend on your platform, build, choices, and which services you use. iOS support is planned; this policy does not announce an iOS release. Browsing this website is covered separately by our Website Privacy Notice.

2. Information we process

Progress stored on your device

Level and chapter progress, stars, earned coins, tool use, unfinished-round recovery, preferences, and local diagnostics are stored on your device. Local progress is not automatically a cloud backup. Uninstalling or clearing app data can remove it.

Account and online services, when used

Supported account features process your email address, account identifier, authentication/session records, and server wallet records. Password sign-in sends credentials securely to the authentication provider; passwords are not sent to gameplay analytics. Google and Apple sign-in are planned options and are not currently enabled in the game interface.

Optional gameplay analytics

On supported release builds, Firebase Analytics receives gameplay events such as level starts and completions, duration, mistakes, stars, rewards, tool use, and settings changes only if you enable “Share gameplay analytics.” Collection starts disabled. Our gameplay event fields exclude names, email addresses, passwords, authentication tokens, free-form messages, and wallet balances. Firebase may also process app-instance identifiers and device/app information under its own SDK practices. Local debug/playtest records are separate from production analytics.

Advertising and consent

Where mobile ads are enabled, Google Mobile Ads/AdMob and its advertising partners may process IP address, approximate location inferred from IP, device and app information, advertising or app-instance identifiers where available, ad interactions, and diagnostic information. Consent choices and applicable device permissions affect personalized advertising. The Game does not request precise device location for ads.

Notifications

Optional Android reminders use a local schedule and notification preferences. If you enable push notifications on a supported build, Firebase Messaging may generate and process an installation identifier and notification token. On supported account builds, we register the notification token, installation identifier, platform, and account association with our server to manage enabled devices. Signed-in players can detach their device; notification tokens are not exposed to other players. Remote-message delivery is still in development. iOS notifications are not currently available.

Purchases, if enabled in a later version

Coin cards are currently previews, not active purchase offers. If purchases become available, Apple/Google and RevenueCat may process product and transaction identifiers, receipt/token information, purchase/refund events, platform information, and account-linked delivery records. We do not receive your full payment-card number. We will update this policy if the launch changes these practices.

Support and service logs

We receive your email address, message, and any files or game details you voluntarily send. Hosting/authentication providers may process IP addresses, request times, device/browser information, and security logs needed to deliver and protect their services.

3. Why we use information

• Run puzzles, save progress and preferences, recover unfinished play, and deliver optional account functions.
• Measure gameplay and improve puzzle balance when you choose to share analytics.
• Deliver ads, apply consent choices, verify earned rewards, and detect invalid advertising activity.
• Provide reminders you enable, respond to support requests, and protect service security.
• Where purchases become enabled, verify store transactions, deliver virtual items, reconcile refunds, and prevent duplicate credits.
• Meet applicable legal obligations and handle access or deletion requests.

Where required by law, optional analytics, advertising personalization, and notifications rely on your consent. Necessary account/support processing may rely on providing a requested service, legitimate security and operational interests, or legal obligations. Consent can be withdrawn through the relevant controls without affecting processing already lawfully completed.

4. Providers and sharing

We do not sell your personal information for money. Service providers process information needed for the functions you use:

• Google AdMob and advertising partners: ads, consent, ad measurement, and fraud prevention. Google Privacy Policy and Google partner-site information.
• Google Firebase: optional Analytics and supported Messaging. Firebase privacy and security.
• Supabase: supported authentication, account records, and server wallet services. Supabase Privacy Policy.
• RevenueCat, when purchase processing is enabled: receipt and transaction handling. RevenueCat Privacy Policy.
• Apple and Google: store download, billing, and platform services. Apple Privacy Policy.
• Hosting, network, and email providers for service delivery, security, and player support.

Advertising partners may use permitted data to deliver and measure ads under applicable consent choices. Disclosures required by law, fraud prevention, legal claims, or a business transfer may also occur, with legally required safeguards and notice. Service providers may process data outside your country; applicable protections and transfer requirements apply.

5. Your choices and rights

• Analytics: Settings → Player privacy → “Share gameplay analytics.” Turning it off stops future optional gameplay event collection on supported builds and resets the local Firebase analytics identifier/data; it does not automatically erase previously transmitted records.
• Ads: open “Ad privacy” in the Coin Plus dialog where regional consent controls are required. You can also manage advertising permissions and identifiers in device settings.
• Notifications: Settings → Notifications and the operating system's notification settings. Disabling push deletes the token through the supported Android adapter.
• Local saves: clear application data or uninstall, subject to any device backup/restore settings. This does not delete online account or provider records.
• Account data: follow our account and data deletion instructions.

You may request access, correction, deletion, restriction, objection, or a portable copy of information we control where these rights apply. Email gamingarenasocial@gmail.com. We may verify account ownership before acting. You may complain to your local data-protection authority.

6. Retention and deletion

Local saves remain on your device until removed, replaced, or cleared; device backups may retain copies. Online account records remain while needed to provide the account. Support messages, transaction/security records, and provider logs are retained only as reasonably necessary for their purpose, legal obligations, fraud prevention, and dispute handling. We do not promise a fixed deletion period that all third-party providers can satisfy.

Request deletion using the deletion page. After verifying ownership, we delete or anonymize account and associated data we control, subject to necessary legal/security exceptions. Some backup copies may remain until overwritten through normal retention cycles. Apple, Google, and other providers control their own transaction and service records. Disabling analytics or uninstalling alone does not delete your online account.

7. Children and family use

Parents and guardians should supervise children's use of online services, ads, notifications, and any future purchases, and review device family controls. We do not knowingly collect children's personal information without any consent required by applicable law or knowingly use it for prohibited behavioral advertising. If you believe a child has provided personal information without the required permission, contact gamingarenasocial@gmail.com so we can investigate and address it.

8. Security and policy changes

We use HTTPS for supported account requests and access controls for account and wallet records. No system is completely secure; protect your device and account credentials. This policy will be updated when features or data practices change, with a revised effective date and additional notice where required.