Untwist Arrows — Privacy Policy

1. Summary

• The game does not require an account and does not ask for your name, email address, contacts, photos or location. The player name and avatar you see in the game are generated on your device.
• Your progress, coins, profile and settings are stored only on your device. Tournament and league rivals are simulated on your device — no scores are sent to us.
• The game shows ads from Google AdMob: rewarded videos you choose to watch and occasional ads between levels. Google may collect your device's advertising ID, IP address and similar data to show and measure ads and to prevent fraud.
• Optional in-app purchases (remove ads, coin packs) are processed by Google Play. We never see your payment details.
• Notifications (chest reminders and occasional news) are sent only if you allow them, via Google Firebase Cloud Messaging. You can switch them off at any time in the game settings.
• In the EEA, the United Kingdom and Switzerland the game asks for your advertising consent through Google's consent form before ads are shown.

2. Who is responsible

Untwist Arrows is developed and published by Rodion Saveliev, a sole proprietorship registered in Poland, trading as Bazovik Studio ("we", "us"). We are the data controller for the processing described in this policy, except where it is stated that Google acts as an independent controller.

• NIP: 9452337027 · REGON: 545851279 · Country: Poland
• Privacy contact: rodion.saveliev.dev@gmail.com

3. Data the game handles

The table lists everything the game handles. "On device" means the data never leaves your phone through us.

We do not use crash-reporting or social SDKs in Untwist Arrows, and we do not sell personal data.

4. Advertising (Google AdMob)

The game offers optional rewarded video ads — for example to get a hint, an extra heart, more time or a bigger level reward — and may show an interstitial ad between levels, no more often than every two levels and not in the first levels. Ads are served by Google AdMob, provided by Google Ireland Limited (EEA/UK users) and Google LLC. Google acts as an independent controller for the data it collects through its SDK. See How Google uses information from sites or apps that use its services and the Google Privacy Policy.

• Legal basis. In the EEA, the UK and Switzerland, personalised ads are shown only with your consent (Art. 6(1)(a) GDPR), collected through Google's consent form. You can change your choice at any time under Settings → Privacy choices in the game. Without consent, Google may show non-personalised ads, which rely on limited data for frequency capping, aggregated reporting and fraud prevention (our legitimate interest in funding a free game, Art. 6(1)(f) GDPR).
• Advertising ID. You can reset or delete your advertising ID, or opt out of personalised ads, in your device settings under Settings → Google → Ads (or Settings → Privacy → Ads).
• Rewards. A reward is granted only after the video has been watched. Nothing is charged to you.

5. In-app purchases

You can optionally buy items such as "No ads" (removes ads between levels; rewarded videos stay available) and coin packs. Payments are handled entirely by Google Play Billing under the Google Payments Privacy Notice. We receive no card or bank details — only confirmation of which item was bought, so the game can deliver and restore it. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Refunds are handled through Google Play.

6. Notifications

After a few levels the game asks whether you want reminders. Only if you agree (and allow notifications in Android) does the game:

• schedule local reminders on your phone — for example when your free chest is ready, or after a day or three without playing. They are created on the device and contain no personal data;
• register with Firebase Cloud Messaging (Google Ireland Limited / Google LLC) so we can send occasional news in your game language. Firebase creates an installation ID and a push token; we use them only to deliver messages and subscribe the device to topics "all" and your language. See Privacy and Security in Firebase.

Legal basis: your consent (Art. 6(1)(a) GDPR). Turn Notifications off in the game settings (or in Android settings) at any time — the game then cancels reminders, unsubscribes from topics and deletes the push token.

7. Analytics

The game uses Google Analytics for Firebase (Google Ireland Limited / Google LLC) to record anonymous gameplay events, such as which levels are started and completed, which boosters are used and whether an ad or purchase screen was opened. Firebase assigns a random app-instance ID; we do not send your name, email or advertising ID, and advertising features of Analytics (ad storage, ad personalisation, advertising-ID collection) are switched off. We look only at aggregated reports. Legal basis: our legitimate interest in improving the game (Art. 6(1)(f) GDPR). Google keeps this data for up to 14 months. See Privacy and Security in Firebase.

8. Data stored on your device

Your level progress, coin balance, boosters, chest timer, achievements, profile choices and settings are saved in the game's private storage on your phone. They are not sent to us or to anyone else. Clearing the app's data or uninstalling the game deletes them permanently.

9. App permissions

• Internet and network state — to load ads, process purchases and receive notifications. The puzzles themselves play offline.
• Post notifications (Android 13+) — requested only after you agree in the game, see section 6.
• Vibrate — for optional haptic feedback, which you can switch off in the game.
• Billing (com.android.vending.BILLING) — for Google Play purchases.
• Advertising ID (com.google.android.gms.permission.AD_ID) — added by the Google Mobile Ads SDK so ads can use the advertising ID, as described in section 4.

The game does not request access to your location, camera, microphone, contacts, photos or files.

10. Sharing and international transfers

We do not share personal data with anyone other than Google as described above (AdMob, Google Play Billing, Firebase Cloud Messaging, Google Analytics for Firebase). Google may process data outside the European Economic Area, including in the United States, relying on the EU–US Data Privacy Framework and Standard Contractual Clauses. We may disclose information if required by law.

11. Security

Data collected by Google's SDKs is transmitted over encrypted connections (HTTPS/TLS). Data saved by the game stays in Android's app-private storage, which other apps cannot read. We do not operate servers that receive player data, so there is no player database on our side that could be breached.

12. Retention and deletion

• On-device data is kept until you clear the app's data or uninstall the game; either action deletes it immediately.
• Advertising data is retained by Google according to its own policies (see How Google retains data). Resetting or deleting your advertising ID breaks the link to previously collected ad data.
• Push tokens are deleted when you turn notifications off; Firebase removes inactive installations after a period of inactivity (typically up to 270 days).
• Purchase records are kept by Google Play as required for payments, tax and accounting.
• Emails you send us are kept for as long as needed to answer you, and for no more than 2 years after the conversation ends unless the law requires longer.

To ask about or request deletion of data, write to rodion.saveliev.dev@gmail.com. We reply within 30 days. As we hold no player data on our servers, in most cases uninstalling the game removes everything we would hold.

13. Children

Untwist Arrows is a general-audience puzzle game and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided personal data through the game, contact us at rodion.saveliev.dev@gmail.com and we will help remove it.

14. Your rights

Under the GDPR you have the right to access your personal data, have it corrected or erased, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you may withdraw consent at any time without affecting earlier processing. Write to rodion.saveliev.dev@gmail.com. For data collected by Google, you can also use the tools in your Google Account. You may lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, or with the supervisory authority where you live.

15. Changes to this policy

We will update this policy when the game changes the way it handles data — for example if a new SDK is added. The current version is always published at this address with its date shown above.

16. Contact

Rodion Saveliev (Bazovik Studio), Poland · NIP 9452337027 · Privacy and support: rodion.saveliev.dev@gmail.com

The privacy policy for the studio website is published separately on the website privacy policy page.