Privacy Policy

1. TL;DR

• We create an anonymous identifier on first visit so your scores and wallet persist — no email required.
• We use Google Firebase for sign-in, database, analytics, and configuration.
• We show ads on mobile through Google AdMob. With your consent, ads may be personalised; without it, you still see generic ads.
• We honor GDPR, UK GDPR, and US state privacy laws (CCPA/CPRA, CO, CT, UT, VA and others).
• You can request access or deletion of your data at any time by emailing privacy@arcadia.games.

2. Data we collect

Account / gameplay

• Anonymous Firebase Auth UID generated on first launch.
• Game progress: best score per game, in-game currency balance, play count.
• Leaderboard entry: your chosen display name (default “Player”) and score for each game.

Device & usage

• Device model, OS version, language, country (derived from IP at the server level, not stored as a raw IP).
• App events (game start/end, score, ad shown, reward earned, IAP) via Firebase Analytics.
• Crash diagnostics (stack traces and device metadata) if a crash occurs.

Advertising

• Android Advertising ID and iOS IDFA, only when you consent via the in-app prompts.
• IAB Transparency & Consent Framework string, storing your choices for ad partners.
• On iOS 14.5+, we respect App Tracking Transparency; if you deny tracking, ads are non-personalised.

We do not collect: precise location, contacts, photos, microphone, camera, or health data.

3. How we use your data

• Provide the games and save your progress across sessions and devices.
• Populate leaderboards (your display name and score are publicly visible).
• Measure performance and fix bugs.
• Serve ads (personalised with consent, non-personalised otherwise).
• Prevent cheating, abuse, and fraud (e.g. implausible score submissions).
• Comply with legal obligations.

4. Legal basis (EEA / UK)

• Contract: data needed to operate the service (auth, progress, leaderboard).
• Consent: personalised ads, tracking identifiers.
• Legitimate interests: measurement, fraud prevention, service improvement.
• Legal obligation: tax records, law-enforcement requests.

5. Third parties

We share data with the following processors strictly for the purposes described above:

• Google (Firebase): Auth, Firestore, Cloud Functions, Remote Config, Analytics, Hosting. Firebase privacy.
• Google AdMob + ad partners: ad serving. The current certified partner list is maintained by Google; see the UMP dialog inside the app.
• Apple / Google app stores: receipt validation for in-app purchases.

We do not sell or rent your data. We do not use your data to train machine-learning models.

6. Retention

• Account + gameplay data: for as long as the anonymous account is active.
• Inactive accounts are purged after 18 months of no activity.
• Analytics events: retained for up to 14 months, then aggregated.
• Deleted accounts are removed from live systems within 30 days.

7. Your rights

Depending on where you live, you may have the right to:

• Access a copy of the data we hold about you.
• Correct inaccurate data.
• Delete your data (“right to be forgotten” / “right to delete”).
• Restrict or object to certain processing.
• Withdraw consent at any time (re-open the in-app consent dialog from Settings).
• Port your data to another service.
• Opt out of the sale or sharing of personal information (US state laws). We do not sell data; we honor Global Privacy Control signals.
• Lodge a complaint with your local data-protection authority.

Email privacy@arcadia.games to exercise any of these rights. Include the first 8 characters of your in-app user ID (shown under Settings → About).

8. Children

Arcadia is intended for a general audience and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided data to us, email privacy@arcadia.games; we will delete it.

9. International transfers

We host data in the European Union (europe-west1). Some processors may transfer data outside the EEA / UK under Standard Contractual Clauses or equivalent safeguards approved by the European Commission.

10. Security

Data in transit is protected with TLS. Firestore access is restricted by security rules that tie each document to the authenticated user. Leaderboard writes go through server-side Cloud Functions that validate plausibility. No system is perfectly secure; if we detect a breach affecting your data, we will notify you and regulators as required by law.

11. Changes

We may update this policy to reflect changes in law or the service. Material changes will be flagged in the app; the “Last updated” date at the top always reflects the current version.

12. Contact

Arcadia — Email: privacy@arcadia.games.