Arrow Puzzle (“the App,” “we,” “us,” or “our”) is a puzzle game published by InningsApps.com (“the Developer”). This Privacy Policy explains how we handle information when you use the App on Android and iOS.
By downloading or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.
1. Summary
The App is designed to work without creating an account.
We store game progress and settings on your device (for example, completed levels, onboarding status, and daily reward state).
On Android, we use Google Firebase services that may collect technical and usage data to help us understand how the App is used, fix crashes, and improve performance.
The Android version of the App displays third-party advertising supplied by Google AdMob and Unity Ads. This includes banner ads, full-screen ads shown at certain moments, an ad that may appear when you open the App, and optional rewarded videos you choose to watch. See section 2.5.
Advertising uses your device’s advertising ID and similar identifiers. Where required by law, you are asked for your advertising consent choices before personalised ads are served.
If you play a versus match with a friend, a display name you choose and a randomly generated player ID are sent to our match servers so the two devices can play together. See section 2.6.
We do not sell your personal information.
The iOS version of the App does not currently include an advertising SDK and does not display ads.
2. Information We Collect
2.1 Information stored on your device (local data)
The App saves data locally on your device so gameplay can continue between sessions. This may include:
Levels you have completed and your progress
Whether you have completed the onboarding tutorial
Daily reward, play streak and related in-game reward state
Coins, hints, unlocked zones and any timed pass you currently hold
A display name you choose for versus matches, and a randomly generated player ID
A count of how many times the App has been opened, used only to pace app-open ads
Other gameplay preferences needed to run the game
This information is stored using your device’s local storage (for example, SharedPreferences on Android). Your saved game progress is not uploaded to our servers, except for the limited match data described in section 2.6 and the technical data collected by the third-party services described in sections 2.2 and 2.5.
2.2 Information collected automatically (Android — Firebase)
On Android, we use Google Firebase, which may automatically collect information such as:
Firebase Analytics: general usage and engagement data (for example, app opens, feature usage, device type, operating system version, and general location at country/region level derived from IP address)
Firebase Crashlytics: crash reports, stack traces, device model, OS version, and app version to diagnose and fix crashes
Firebase Performance Monitoring: performance data (for example, app startup time, screen load times, and network request performance where applicable)
Firebase Cloud Messaging: a device registration token used to deliver notifications such as game announcements, if you have allowed notifications
Firebase Remote Config: configuration values fetched from Google’s servers (for example, whether an app update is required, and which advertising units and placements are enabled)
Firebase Realtime Database and Cloud Functions: used only for versus matches, to carry the live state of a match between the two devices playing it — see section 2.6
Firebase App Check with Google Play Integrity: requests an attestation token from Google Play confirming that a request to our match servers came from a genuine, unmodified install of the App. This is an anti-abuse measure and is not used to identify you.
Firebase may assign an app instance identifier or similar technical identifiers. We do not use Firebase to collect your name, email address, or phone number through the App itself, because the App does not ask you to provide them.
For more information about how Google processes data, see:
The App may request or use the following permissions:
Vibration: used for haptic feedback during gameplay (Android)
Notifications: requested on Android 13 and later, used for daily play-streak reminders and occasional game announcements. You can decline, and you can turn notifications off at any time in your device settings.
Network access: used to fetch configuration, deliver advertising, run versus matches, and report crashes and analytics.
The App does not require access to your contacts, photos, microphone, camera, or precise location for core gameplay.
2.4 Information you provide to us
The App does not require you to create an account or submit personal information to play.
If you use the versus feature, you choose a display name. This name is shared with the person you are playing against and is stored on our match servers for the life of the match room. Please do not use your full legal name or any other personal information as your display name — choose a nickname.
If you contact us by email, we will receive whatever information you choose to send (such as your email address and message content).
2.5 Advertising (Android)
The Android version of the App shows third-party advertising served by Google AdMob and Unity Ads. Which of the two is asked for a given ad is controlled remotely and either may serve any of the formats below, except app-open ads, which come from AdMob only. Advertising as a whole is controlled remotely too, so which formats appear — and whether any appear at all — can change without a new app release. As of the date of this policy, the App may show the following:
Rewarded video (you choose to watch): an optional short video you start by tapping, in exchange for an in-game benefit. These are offered to continue a level after your lives run out, to add time to a daily challenge, to get a hint or an extra hint, to unlock a level or a whole zone ahead of your progress, and to claim a timed pass. You are never required to watch one to keep playing.
Banner ads: a small ad strip displayed on certain screens, such as the home screen and the daily challenge screen. From a certain point in the game a banner strip may also appear on the gameplay screen, pinned along the top above the puzzle. It sits outside the puzzle area and is never drawn over the board itself, and it does not cover or block any part of the puzzle.
Interstitial ads: full-screen ads shown at transition points between screens — for example after completing a level (not every level), when entering a daily challenge, when opening or joining a versus match, and after leaving a finished versus match. These are shown at a limited rate rather than at every such transition.
App-open ads: a full-screen ad that may appear when you launch the App. This does not happen on every launch.
Interstitial and app-open ads are suppressed during a live versus match so that an ad cannot cost you a timed race.
What advertising collects. Both ad networks and their advertising partners may collect and process information such as your device’s advertising identifier (Google Advertising ID), IP address, device and operating system details, coarse location derived from IP address, and your interactions with the ad, in order to serve, cap, measure and — where permitted — personalise ads and detect fraud. This data is collected by those companies and their partners as independent controllers under their own policies. See how Google uses information from partner apps, the Google advertising policies, and the Unity game player and app user privacy policy.
Consent. Where required by law (for example, in the EEA, the UK and Switzerland), a consent form is presented through Google’s User Messaging Platform (UMP) to collect your choices before personalised ads are served. There is one form, not one per network: the choices you make in it are recorded in the industry-standard format both ad networks read, and neither network is started at all until that form has been answered. If you do not consent to personalised advertising, the App may still show non-personalised ads, which use limited data for frequency capping, reporting and fraud prevention.
Your controls. You can limit ad personalisation or reset your advertising ID at any time in your device settings (on Android: Settings → Google → All services → Ads, or Settings → Privacy → Ads depending on your device). Resetting the advertising ID breaks the link to previously collected advertising data.
Children. The App is not directed at children, and our ad units are not configured as child-directed — see section 7.
2.6 Online multiplayer (“Play with a friend”)
Versus matches are the only feature that sends your gameplay data off your device. When you create or join a match, the following is sent to and stored on our Firebase Realtime Database and processed by our Cloud Functions:
A randomly generated player ID. This is a random value created on your device the first time multiplayer is used and stored locally. It is not derived from your device’s hardware identifiers, your Google account, or your advertising ID, and it cannot be used to link you to other apps.
The display name you chose (truncated to 24 characters), so your opponent can see who they are playing.
Match state: the room’s invite code, the difficulty band, the shared puzzle board, your live progress through it, timestamps set by the server, and the final result.
A Play Integrity attestation token (see section 2.2), used to confirm the request came from a genuine install.
Your opponent can see your display name and your progress during the match. We do not use match data for advertising, and we do not combine it with the analytics or advertising data described above.
If you do not use the versus feature, none of this is sent.
3. How We Use Information
We use information to:
Provide and maintain the App and your game progress
Improve gameplay, stability, and performance
Understand how the App is used (Analytics)
Diagnose and fix crashes (Crashlytics)
Measure and improve app performance (Performance Monitoring)
Deliver notifications you have allowed, such as daily reminders
Serve, cap, measure and (where you have consented) personalise advertising, and detect advertising fraud (section 2.5)
Run versus matches between two devices and decide their result (section 2.6)
Protect the App and our match servers from abuse and tampering
Respond to support requests you send us
Comply with legal obligations where applicable
We do not use your information to send marketing emails unless you separately contact us and agree to receive updates.
4. Legal Bases (EEA/UK users)
If you are in the European Economic Area or the United Kingdom, we process information based on:
Performance of a contract / service: to provide the App, save your progress, and run a versus match you asked to join
Legitimate interests: to improve the App, prevent fraud, and maintain security (for example, crash reporting, analytics, App Check attestation and non-personalised advertising), where those interests are not overridden by your rights
Consent: where required by law, including for personalised advertising, for the storing of and access to information on your device for advertising purposes, and for notifications
5. Sharing of Information
We do not sell your personal information.
We may share information only in these situations:
Google, as our service provider: Firebase Analytics, Crashlytics, Performance Monitoring, Cloud Messaging, Remote Config, Realtime Database, Cloud Functions and App Check, acting on our behalf to provide analytics, crash reporting, performance monitoring, messaging, configuration and multiplayer
Google AdMob and Unity Ads, and their advertising partners: for serving, capping, measuring and (where permitted) personalising advertising, and for fraud prevention. For advertising, these companies and their partners act as independent controllers under their own privacy policies.
Other players: if you start or join a versus match, your display name and your live progress in that match are visible to the person you are playing against
Legal requirements: if required by law, regulation, legal process, or governmental request
Business transfers: if we are involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction, subject to this Privacy Policy
6. Data Retention
Local game data remains on your device until you uninstall the App or clear the App’s data in your device settings.
Firebase data is retained according to Google’s and Firebase’s retention policies and our configuration in the Firebase console. We retain crash and analytics data only as long as needed for the purposes described in this policy.
Versus match data (player IDs, display names, boards and results) is kept only as long as needed to run and adjudicate matches, and is periodically deleted.
Advertising data is retained by the ad networks and their advertising partners under their own retention policies; we do not hold a copy of it.
7. Children’s Privacy
The App is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from children. Our advertising is not configured to treat users as child-directed, and personalised advertising is not knowingly served to children. If you believe a child has provided us personal information, or has been shown advertising in the App, contact us and we will take steps to delete the information.
8. Your Choices and Rights
Depending on where you live, you may have rights to:
Access, correct, or delete personal information we hold about you
Object to or restrict certain processing
Withdraw consent where processing is based on consent
Opt out of the “sharing” of personal information for cross-context behavioural advertising (California and similar US state laws)
Lodge a complaint with a data protection authority
On your device, you can:
Uninstall the App to remove locally stored data
Reset or clear app data in Android Settings → Apps → Arrow Puzzle → Storage. This also clears your versus player ID and display name, and your app-open counter.
Turn off notifications in Android Settings → Apps → Arrow Puzzle → Notifications
Choose not to use the versus feature, in which case nothing is sent to our match servers
Advertising and analytics controls (Android):
You can limit ad personalisation or delete/reset your advertising ID in your device’s Google account or Android settings, which applies to the App and to every other app on the device. Where a consent form was shown to you, you can also withdraw or change your advertising consent by clearing the App’s data as described above, which resets your stored consent choices so the form is presented again. Firebase, AdMob and Unity Ads may use device identifiers as described in their own policies.
To exercise privacy rights, contact us at apps.innings@gmail.com. We may need to verify your request. Because the App has no accounts, we may ask you for your in-app player ID in order to locate any data relating to you.
9. Security
We use reasonable technical and organizational measures to protect information, including Google Play Integrity attestation on requests to our match servers. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
10. International Transfers
If you use the App from outside the country where our service providers operate, your information may be processed in countries (including the United States) where privacy laws may differ from those in your region. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. Continued use of the App after changes means you accept the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact: