Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how Rupazen ("Rupazen", "we", "us" or "our") collects, uses, and protects information when you use our mobile games — including Arrows — our website, and related services (together, the "Services"). By using the Services you agree to this Policy. If you do not agree, please do not use the Services.

1. Scope

This Policy applies to all games and websites published by Rupazen. Our games can be played without creating an account; connecting a Google account is optional and only needed for cloud save.

2. Information We Collect

a) Information you provide

• Optional account connection: if you choose to connect with Google Sign-In, we receive your basic Google profile — name, email address, profile picture, and a unique account identifier — used solely to save and restore your game progress.
• Support communications: if you email us, we receive your email address and the contents of your message.

b) Information collected automatically

• Gameplay data: level progress, scores, streaks, collected rewards, in-game settings. Stored on your device; synced to our servers only when you connect an account.
• Device & usage data: device model, operating system version, language, app version, approximate region, session and interaction events (via Google Firebase Analytics), and crash data.
• Advertising identifiers: your device advertising ID, collected by our advertising partner (Google AdMob) to show and measure ads.
• Website: our website pages are static and set no tracking cookies of their own.

c) Purchases

In-app purchases (for example "Remove Ads") are processed entirely by Google Play Billing. We never receive or store your card or payment details — we only receive confirmation that a purchase was completed.

3. How We Use Information

• Operate the games and save/restore your progress across devices;
• Show ads and (with consent where required) personalize them;
• Measure and improve gameplay, difficulty, and stability;
• Provide customer support and respond to your messages;
• Detect fraud and abuse, and enforce our Terms of Service;
• Comply with legal obligations.

4. Third-Party Services We Use

The Services embed the following partners, which may process data as independent controllers under their own policies:

5. Advertising & Your Consent

Our games are free and supported by ads (banner, interstitial, and optional rewarded ads). In regions where consent is required (for example the EEA/UK), a consent form is shown on first launch via Google's User Messaging Platform, and you can choose non-personalized ads. You can also limit ad tracking or reset your advertising ID at any time in your device settings, and remove interstitial ads entirely through the "Remove Ads" purchase.

"Do Not Track": as uniform DNT standards have not been adopted, our Services do not currently respond to browser DNT signals; use the consent and device-level controls described above instead.

6. How We Share Information

We do not sell your personal information. We share it only:

• with the service providers listed in Section 4, to run the Services;
• if required by law, legal process, or to protect rights and safety;
• as part of a merger, acquisition, or asset sale (we will notify you of any change in ownership or use of your personal information).

7. Data Retention & Deletion

• Local game data stays on your device until you clear it or uninstall.
• Cloud save data is retained while your account stays connected.
• You can disconnect your account at any time in Settings.
• To permanently delete your cloud data, email contact.rupazen@gmail.com from the connected address — we will delete it within 30 days.

8. Security

We use commercially reasonable technical and organizational safeguards — including encrypted transport (HTTPS) and per-user access rules on cloud data — to protect your information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If a breach affecting your personal data occurs, we will notify you and the relevant authorities as required by applicable law.

9. Children

The Services are not directed to children under 13, or any higher minimum digital-consent age set by your local law (up to 16 in parts of the EEA), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at contact.rupazen@gmail.com and we will delete it promptly.

10. Your Rights

Depending on where you live, you may have the right to:

• access a copy of the personal information we hold about you;
• correct inaccurate information;
• delete your information ("right to be forgotten");
• receive your information in a portable format;
• object to or restrict certain processing;
• withdraw consent at any time (e.g. ad personalization);
• lodge a complaint with your local data-protection authority.

European Economic Area, United Kingdom & Switzerland

We process personal data under the legal bases of consent (ads personalization), performance of a contract (cloud save you request), and legitimate interests (analytics, security). Ad partners may profile usage for personalization only where you have consented. International transfers are protected by Standard Contractual Clauses implemented by our processors. You may complain to your local supervisory authority.

United States

California (CCPA/CPRA): we do not sell or "share" personal information as defined by the CCPA/CPRA; you may exercise your access and deletion rights via the contact below without discrimination. Residents of other states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Texas and others) have similar rights of access, deletion, correction, and opt-out of targeted advertising — all exercisable through the same contact.

Brazil (LGPD)

We process personal data under the LGPD's legal bases of consent, contract performance, and legitimate interest. You may request confirmation of processing, access, correction, anonymization, deletion, portability, and information about sharing, and you may complain to the ANPD. Contact us below to exercise these rights.

India (DPDP Act, 2023)

As an India-based publisher, we honor your rights under the Digital Personal Data Protection Act — access, correction, erasure, and grievance redressal. Contact our Grievance Officer (Section 12); if unresolved, you may approach the Data Protection Board of India.

Other regions

We honor applicable local data-protection law wherever you play — including Canada (PIPEDA), Japan (APPI), South Korea (PIPA), Australia (Privacy Act/APPs), and Singapore/Thailand (PDPA). Whatever your jurisdiction, you can always reach us at the contact below to access, correct, or delete your data.

To exercise any right, email us — we respond within 30 days.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date, and where appropriate, notified in-app. Continued use after changes means you accept the updated Policy.

12. Contact & Grievance Officer

We aim to acknowledge complaints within 48 hours and resolve them within 30 days, in line with applicable Indian IT rules.