Privacy Policy

Introduction

This privacy policy applies to the ArrowLord app (hereby referred to as the “Application”) for mobile devices, which was created by Tram Thi Nguyen (hereby referred to as the “Service Provider”) as a free service. This service is intended for use “AS IS”.

This policy explains what information the Application collects, how it is used and shared, and the choices and rights available to you. There is no registration or login: the Application does not ask you for your name, email address, password, postal address, or precise location.

Information Collection and Use

The Application collects information when you download and use it. This information may include:

• Your device’s Internet Protocol address (e.g. IP address), and a coarse country or region derived from it.
• Device and advertising identifiers, such as the Identifier for Advertisers (IDFA) and Identifier for Vendors (IDFV) on iOS, and the Android Advertising ID on Android. On iOS, IDFA is only accessible if you grant permission through Apple’s App Tracking Transparency prompt.
• An anonymous player identifier: a randomly generated identifier (UUID) that our servers assign to your installation the first time you launch the Application. It is used to save your progress, restore it when you move to a new device, and link your activity across sessions. It is not linked to your name, email address, or any account credentials, because there are none.
• On Android, a device-level identifier exposed by the platform’s digital rights management (DRM) subsystem (a Widevine device ID), which is transmitted to our servers to recognise a device and prevent abuse. It is not used for advertising.
• The operating system you use on your mobile device, device model and manufacturer, language and region settings, screen size, network type, and app version.
• Network and connection signals: whether a VPN, proxy, or tunnelling interface appears to be in use, and whether a SIM card is currently present. These are used to prevent fraud and manipulated traffic. They are not used to identify you personally.
• Your use of the Application: sessions, levels reached, in-game events and progress, time spent, and your interactions with advertisements (such as impressions, clicks, and rewarded video completions).
• Diagnostic and performance data, such as crash reports and error logs, used to keep the Application stable.

The Application does not gather precise information about the location of your mobile device, and it does not collect sensitive categories of personal information such as health data, biometric data, racial or ethnic origin, religious beliefs, or political opinions.

The information collected is used to provide and maintain the Application, save and restore your progress, display and measure advertisements, measure which marketing campaigns brought players to the Application, understand how the Application is used so it can be improved, detect and prevent fraud and abuse, respond to your support requests, and comply with legal obligations.

The Application communicates with backend servers operated by the Service Provider. These servers receive your anonymous player identifier, device identifier, IP address, request timestamps, and the parameters required to process each request. This information is used to operate the Application, keep it secure, and prevent abuse; it is not used for advertising.

Legal Bases for Processing (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases under the GDPR / UK GDPR:

• Consent (Art. 6(1)(a)) — for accessing or storing information on your device for advertising and analytics purposes, for personalized advertising, and for cross-app tracking. You may withdraw your consent at any time.
• Legitimate interests (Art. 6(1)(f)) — for operating and securing the Application, preventing fraud and abuse, serving non-personalized advertising, and understanding aggregate usage. We balance these interests against your rights.
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose information to comply with applicable law.
• Performance of a contract (Art. 6(1)(b)) — where processing is necessary to provide a feature you requested.

We and our service providers may process your information in countries other than your own, including the United States. Where personal data from the EEA, the UK, or Switzerland is transferred to a country that has not received an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms. You may contact us for more information about these safeguards.

Third Party Access

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

Additional advertising networks may be enabled through the advertising mediation configuration. Where that is the case, those networks act as independent controllers for advertising purposes, and their own privacy policies apply to their processing. This list is kept under review and updated when integrations change.

The Service Provider may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with their trusted service providers who work on their behalf, do not have an independent use of the information disclosed to them, and have agreed to adhere to the rules set forth in this privacy statement.

The Service Provider does not sell your personal information for monetary consideration. However, like many advertising-supported applications, the Application may “share” personal information (as that term is defined under the CPRA) for cross-context behavioral advertising, and you have the right to opt out as described in the section below.

Advertising and Tracking Choices

iOS — App Tracking Transparency

On iOS 14.5 and later, the Application asks for your permission before tracking your activity across other companies’ apps and websites. If you decline, the Application will not access your IDFA for tracking purposes and will serve only non-personalized advertising. You can change this at any time in Settings → Privacy & Security → Tracking.

EEA, UK and Switzerland — consent

If you are in these regions, the Application will ask for your consent before your information is used for personalized advertising or for analytics that are not strictly necessary to operate the Application. You are free to refuse, and refusing will not prevent you from playing. You can change or withdraw your choice at any time using the privacy options in the Application’s settings, or by contacting us at the address below. Withdrawing consent does not affect processing carried out before you withdrew it.

Device-level advertising controls

• iOS: reset your advertising identifier or disable ad personalization via Settings → Privacy & Security.
• Android: reset or delete your advertising ID, or opt out of ads personalization, via Settings → Google → Ads (the path may vary by device).

California — Do Not Sell or Share

California residents may opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. To exercise this right, email us at the address in the Contact Us section with the subject line Do Not Sell or Share My Personal Information. We will honour your request, including by directing our advertising partners to stop using your information for personalized advertising where technically feasible.

Opt-Out Rights

You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

Please note that uninstalling the Application does not automatically delete information that has already been collected. To request deletion, please contact us at the address below.

Data Retention Policy

The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. Analytics and attribution data is retained according to the retention schedules of the providers listed above, and is generally kept in identifiable form for a limited period before being aggregated or deleted. If you would like the Service Provider to delete User Provided Data that you have provided via the Application, please contact them at the address below and they will respond in a reasonable time, unless they are legally required to retain it.

Your Rights

If you are in the EEA, the UK, or Switzerland

You have the right to access the personal data we hold about you and obtain a copy; to rectify inaccurate or incomplete data; to erase your data in certain circumstances; to restrict or object to certain processing, including processing based on legitimate interests; to data portability for data you provided to us where processing is based on consent or contract; to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal; and to lodge a complaint with your local supervisory authority.

If you are a California resident

Under the CCPA/CPRA you have the right to know what categories and specific pieces of personal information we collect, the sources, our purposes, and the categories of third parties with whom we share it; to delete personal information we have collected from you, subject to certain exceptions; to correct inaccurate personal information; to opt out of the sale or sharing of personal information for cross-context behavioral advertising; to limit the use and disclosure of sensitive personal information (we do not collect sensitive personal information for the purpose of inferring characteristics about you); and to non-discrimination — we will not deny you services, charge you different prices, or provide a lower quality of service because you exercised your rights. You may designate an authorised agent to make a request on your behalf.

Residents of other regions

Depending on where you live, you may have additional rights under local law, for example under Japan’s Act on the Protection of Personal Information or Korea’s Personal Information Protection Act. We will honour requests to access, correct, or delete your information to the extent required by applicable law.

To exercise any of these rights, email us at the address in the Contact Us section. We may ask you to verify your identity before fulfilling a request, and we will respond within the timeframe required by applicable law (generally within 30 days, or 45 days for CCPA/CPRA requests). Some information is held by third-party providers under their own policies; where that is the case, we will tell you and, where possible, help you contact them.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13 (or under 16 in the EEA and the UK, or such other age as required by local law). The Service Provider does not knowingly collect personally identifiable information from children below that age. In the case the Service Provider discovers that a child below that age has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider at the address below so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains. However, no method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2026-10-10.

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us. Where consent is the legal basis for processing, you may withdraw it at any time as described above; withdrawing consent does not affect processing carried out before you withdrew it.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices described here, please contact the Service Provider via email.

We aim to respond to all privacy enquiries within 30 days.