Privacy Policy for Arrow

Effective Date: August 10, 2026

Last Updated: August 10, 2026

Arrow Apps. ("Arrow Apps.," "we," "us," or "our") operates the Arrow mobile game (the "App"). This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use the App, and describes the privacy choices and rights that may be available to you.

Arrow Apps. is the data controller for the processing described in this Privacy Policy, except where a third-party provider acts as an independent controller under its own privacy policy.

1. Scope and Key Points

This Privacy Policy applies to the App and the services made available through it. It does not govern third-party apps, stores, websites, advertisements, or services that have their own privacy policies.

Key points about Arrow:

• You do not need to create an Arrow account to play.
• Core game progress, preferences, and league profile information are stored locally on your device.
• The App uses third-party services for advertising, consent management, analytics, remote configuration, attribution, purchases, and optional platform achievements.
• The App does not request access to your camera, microphone, photos, contacts, or precise GPS location.
• Where required, you can manage advertising and analytics consent through the privacy choices presented in the App.

2. Information We Handle

Depending on how you use the App, we or our service providers may handle the following categories of information.

2.1 Information You Provide

Support communications. If you contact us, we may receive your email address, the content of your message, attachments you choose to send, and any other information you voluntarily provide.

League profile choices. You may choose an in-game league name and country. These details are used for the App's local league presentation and are stored in the local player profile. The current version does not operate an Arrow cloud account for that profile.

Purchase and platform-service interactions. If you make a purchase, restore a purchase, or use an optional platform feature, the relevant app store or platform may provide the App with limited information such as a product identifier, purchase or entitlement status, transaction or receipt identifier, authentication status, and achievement progress. We do not receive your full payment-card details.

2.2 Information Stored Locally on Your Device

The App creates a local player profile that may include:

• a randomly generated local profile identifier and profile creation date;
• game progress, completed levels, scores, stars, mistakes, streaks, awards, collectibles, challenge history, and achievement progress;
• locally simulated league identity, tier, ranking, score, and season history;
• saved rounds and other information needed to resume gameplay;
• language, sound, vibration, visual theme, game-speed, and advertising-removal preferences; and
• consent state, advertising frequency state, and locally recorded advertising entitlement or reward state.

This local information generally remains on your device unless a particular item is sent as an analytics event, submitted to an optional platform service, included in a support request at your direction, or handled by your operating system under its own backup settings.

2.3 Information Collected Automatically

The App and its third-party SDKs may automatically collect or receive:

Device and app information, such as device type and model, operating-system and App version, language, locale, country or region, time zone, screen or technical settings, network type, IP address, and general diagnostic information.

Identifiers, such as a mobile advertising identifier, vendor or app-set identifier, Firebase App Instance ID, installation identifier, and similar pseudonymous identifiers. The App may provide its Firebase App Instance ID to AppsFlyer as a customer user identifier for attribution and measurement.

Approximate location, such as country or general region inferred from your IP address or device locale. The App does not request precise GPS location.

App activity and gameplay events, such as App launches, screens or tabs viewed, feature interactions, selected settings, current level, level or challenge completion, collection and award progress, and timestamps or dates associated with gameplay.

Advertising and consent information, such as consent status and privacy choices, ad requests, load and display results, ad format and placement, the advertising network and ad unit, impressions, clicks, rewarded-ad completion, error information, and ad revenue value, currency, and measurement precision.

Attribution information, such as whether an installation or App open was associated with an advertising campaign, the referring network or campaign, conversion data, and fraud-prevention signals.

We do not intentionally collect sensitive personal information such as government identifiers, financial-account credentials, health information, biometric templates, or the contents of private communications through the App.

2.4 Information From Third Parties

We may receive information from advertising networks, attribution providers, analytics providers, app stores, Google Play Games, Apple Game Center, or other platform services when you interact with those services. The information received depends on the service, your platform settings, your consent choices, and the feature you use.

3. How We Use Information

We may use information to:

• provide, operate, save, restore, and personalize the App and its gameplay features;
• maintain local progress, purchases, rewards, achievements, and settings;
• deliver contextual or personalized advertising, where permitted;
• measure ad delivery, engagement, attribution, and advertising revenue;
• understand feature use, diagnose failures, improve game balance, and develop new features;
• retrieve and apply remote configuration, including advertising and consent settings;
• prevent fraud, abuse, invalid advertising activity, and security incidents;
• respond to support messages and privacy requests;
• comply with law, enforce applicable terms, and protect users, the public, and our rights; and
• complete a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

We may aggregate or de-identify information and use it for analytics, reporting, research, and product improvement where the information is no longer reasonably linked to an identifiable person.

4. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on one or more of the following:

• Consent, including for personalized advertising, advertising storage, analytics storage, or related SDK processing where consent is required. You may withdraw your consent through the available privacy choices.
• Performance of a contract, when processing is necessary to provide an App feature you request, complete or restore a purchase, or connect an optional platform service.
• Legitimate interests, including operating and improving the App, measuring performance, providing non-personalized advertising, preventing fraud, securing the App, and responding to support requests, where those interests are not overridden by your rights.
• Legal obligations and protection of rights, where processing is required by law or necessary to establish, exercise, or defend legal claims or protect vital interests.

5. Advertising and Privacy Choices

The App may display banner, interstitial, app-open, and opt-in rewarded advertisements. Google AdMob may select an enabled mediation partner to fill a particular advertising request.

The App uses Google's User Messaging Platform (UMP) to request, record, and communicate consent where required. Until the applicable consent flow permits advertising requests, the App uses a restricted state. Where UMP requires a privacy-options form, the App may provide a Privacy choices entry in Settings so that you can review or change your choices.

Declining personalized advertising does not necessarily remove all advertising. You may still receive contextual or non-personalized ads, and limited information may still be processed for ad delivery, frequency control, security, fraud prevention, and measurement as permitted by law.

If a Remove Ads purchase is available and activated, it suppresses banner, interstitial, and app-open advertising. Optional rewarded advertisements may remain available when you choose to use a reward-based feature.

You can also manage or reset your device's advertising identifier and advertising preferences through Android or iOS settings. The wording and location of these controls depend on your device and operating-system version.

6. How We Disclose Information

We may disclose information to the following categories of recipients:

• Service providers and SDK partners that provide advertising, analytics, attribution, remote configuration, consent management, fraud prevention, technical infrastructure, or support.
• App stores and gaming platforms when needed to process purchases, restore entitlements, authenticate a platform account, or submit achievement progress.
• Authorities and other parties for legal reasons when reasonably necessary to comply with law or legal process, investigate fraud or security issues, enforce our rights, or protect users and the public.
• Transaction participants in connection with a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, or sale of assets.
• Other parties at your direction or with your consent.

We do not make your local league name, country, or gameplay profile publicly available through an Arrow-operated online service in the current version.

7. Third-Party Services and Privacy Notices

The App may use the services below. Not every provider receives information during every session; this depends on your platform, consent choices, feature use, region, and which advertising network fills a request. These providers may process information as our service providers, processors, or independent controllers, depending on the service and applicable law.

Third-party services control their own processing practices, retention periods, and privacy-request procedures. We encourage you to review their current notices.

8. Sale, Sharing, and Targeted Advertising

Arrow Apps. does not sell personal information for monetary consideration. However, the disclosure of device identifiers, app activity, or advertising information to advertising partners may be considered a "sale," "sharing," or use for targeted advertising under certain United States state privacy laws, even when no money is paid for the information.

Where applicable, you may opt out of personalized or targeted advertising through the App's privacy choices, your device advertising settings, or by contacting us at datagov@memeandsticker.com. We will not discriminate against you for exercising an applicable privacy right.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the App, comply with legal and accounting requirements, resolve disputes, prevent fraud, and enforce agreements.

• Local profile and saved-game information generally remains until you clear the App's data or uninstall the App, subject to any backup behavior controlled by your device or platform.
• Support correspondence may be retained until the request is resolved and afterward for a reasonable period needed for security, legal, or recordkeeping purposes.
• Analytics, attribution, advertising, purchase, and platform data is retained under our applicable settings and the retention practices of the relevant provider.
• Aggregated or de-identified information may be retained longer where it can no longer reasonably identify you.

When information is no longer needed, we take reasonable steps to delete or de-identify it, subject to legal requirements and backup cycles.

10. International Data Transfers

Our providers may process information in the United States and other countries that may have privacy laws different from those where you live. Where required, transfers are supported by recognized safeguards, such as adequacy decisions, contractual data protection clauses, or participation by a provider in an applicable data-transfer framework. You can review each provider's privacy notice for more information about its locations and transfer safeguards.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction. Local saves use the App's private storage area and a recovery copy to reduce accidental data loss. Data sent to third-party services is transmitted using the security mechanisms provided by the platform and SDK.

No method of storage or transmission is completely secure. We therefore cannot guarantee absolute security.

12. Your Choices and Privacy Rights

12.1 Choices Available to All Users

Depending on your device and region, you may be able to:

• review or change consent through Privacy choices in the App when that option is required and available;
• limit personalized advertising, delete or reset the advertising identifier, or manage tracking permissions in your device settings;
• clear local App data or uninstall the App to remove locally stored information;
• disconnect or manage Google Play Games or Game Center through the applicable platform settings; and
• contact us to request information about our processing or to exercise a legal right.

12.2 Rights Under Applicable Law

Depending on where you live, you may have the right to:

• request access to or a copy of personal information about you;
• request correction or deletion;
• request restriction of processing;
• object to processing based on legitimate interests or for direct marketing;
• withdraw consent at any time, without affecting processing that occurred before the withdrawal;
• receive certain information in a portable format;
• opt out of sale, sharing, targeted advertising, or certain profiling;
• appeal a decision we make about your request; and
• lodge a complaint with your local data-protection authority or regulator.

To submit a privacy request, email datagov@memeandsticker.com with a description of your request. We may ask for information reasonably necessary to verify your identity, location, device, or authority to act for another person. We will use verification information only to process the request.

Because much of the information handled by the App is stored locally or associated only with pseudonymous identifiers, we may not be able to identify or retrieve it from our systems without relevant details from you. Data controlled independently by an ad network, app store, or gaming platform may need to be requested directly from that provider.

If we deny a request and applicable law gives you an appeal right, you may appeal by replying to our decision. Authorized agents may submit requests where permitted by law, subject to appropriate proof of authorization.

13. Children's Privacy

The App is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If local law requires parental authorization for consent-based processing at a higher age, that requirement applies.

We do not knowingly sell or share the personal information of users under 16, or use it for targeted advertising, without any affirmative authorization required by law.

If you are a parent or guardian and believe that a child has provided personal information through the App, contact us at datagov@memeandsticker.com. We will review the request and take appropriate steps, including deletion where required by law.

14. Third-Party Content and Links

Advertisements and platform features may link to third-party apps, websites, or content. We do not control those third parties and are not responsible for their content or privacy practices. Review the privacy notice of any third-party service before providing information to it.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the App, our providers, legal requirements, or our privacy practices. We will post the revised policy and update the "Last Updated" date. Where required, we will provide additional notice or request new consent before a material change takes effect.

16. Contact Us

Operator and Data Controller: Arrow Apps.

General Support: support@memeandsticker.com

Privacy and Data Rights: datagov@memeandsticker.com

Please include enough detail for us to understand and respond to your question or request.