Arrow Escape

Privacy Policy

Effective 14 October 2026

Toolverse ("we", "us") publishes Arrow Escape: Tap Away Puzzle (the "App") for Android and iOS. The App has no account for you to create and no servers of its own: your progress stays on your device. It does use Google services for advertising, analytics, crash reporting and an anonymous sign-in, and the app stores handle purchases. This policy explains exactly what that means.

The short version

You can play the whole game without an internet connection. We never ask for your name, email address, contacts, photos or location.

Data stored on your device

The App keeps your level progress, coins, hints, achievements, daily challenge results and streak, and your settings (sound, haptics, theme, reminders) in local app storage. Nothing of this is uploaded to us, because we have no server. Uninstalling the App deletes all of it from the device. If you are signed in to Google Play Games, a copy is also kept in your Google account (see below); otherwise there is no way for us to recover lost progress.

Advertising (Google AdMob)

The free App shows interstitial ads between levels (only after a good number of levels have been played) and optional rewarded ads that you choose to watch for a heart, a hint or a skip. Ads are served by Google AdMob, which may collect your device's advertising ID, IP address, coarse location derived from it, device and app information, and how you interact with ads, and may use that to show personalised ads where you have consented.

In the European Economic Area, the United Kingdom and Switzerland the App shows Google's consent form before any ad is loaded, and you can decline personalised ads. On iOS the App asks for tracking permission through Apple's App Tracking Transparency prompt; declining it limits ads to non-personalised ones. Buying "Remove Ads" stops interstitials and banner-style ads entirely; rewarded ads remain available only if you tap to watch them.

Google's own privacy policy and ad settings apply to this processing: https://policies.google.com/technologies/ads

Analytics (Google Analytics for Firebase)

To understand which levels are too hard, which features are used and where players stop, the App sends gameplay events to Google Analytics for Firebase: level started, completed, failed or skipped, hints and guidance used, ads shown or unavailable, purchases (product name only), daily challenge and trophy results, quests and login bonuses claimed, and settings changed. Each event carries a random app-instance ID, the app version, device model, operating system, language and country (derived from the IP address, which is not stored). No name, email address or precise location is ever included.

Google retains this data for the period set in Firebase Analytics (user-level data for two months by default; aggregated reports for longer). Debug and development builds of the App send nothing.

Achievements and rankings (Google Play Games)

On Android the App works with Google Play Games Services. If you have a Play Games profile, Google signs you in automatically when the App starts, or you can sign in from Settings; the game plays the same without it. While you are signed in, the App sends Google the achievements you unlock and your scores for four leaderboards (highest level cleared, total stars, best daily streak and dailies completed). Google shows them on your Play Games profile and in rankings that other players can see, under your Play Games name and avatar.

The Rankings screen in the App shows these leaderboards: for each place, a player's Play Games name, avatar and score, as Google provides them. If you choose its Friends filter, Google first asks whether the App may see your Play Games friends list; if you agree, the App receives your friends' names, avatars and scores to show that ranking. The App shows this and keeps none of it.

Cloud save: while you are signed in, the App keeps a copy of your game (level progress, stars, coins, diamonds, hints, achievements, daily results, streak, and what you have bought or unlocked) in Google Play Games Saved Games, in your own Google account, so it comes back after a reinstall or on a new phone. We cannot read or change it; only the App on your devices can. You can delete it in the Google Play Games app or your Google Account. Before a real-money purchase the App asks you to sign in, so that what you buy is kept with your account.

About you, the App receives only your Play Games player ID, name and avatar from Google; it does not store them and we never receive your email address. Your profile's visibility and the deletion of your Play Games data are managed in the Google Play Games app and your Google Account, under Google's privacy policy: https://policies.google.com/privacy

Crash reporting (Firebase Crashlytics)

If the App crashes or hits an unexpected error, Firebase Crashlytics sends a report with the stack trace, the app version, device model, operating system version, free memory and storage, orientation and a random installation ID. Google keeps crash data for 90 days. We use it only to fix the crash.

Anonymous sign-in (Firebase Authentication)

When the App starts with an internet connection, Google's Firebase Authentication signs this install in anonymously: it creates an account ID that belongs to the install, with nothing for you to type or choose. The account holds no name, email address, phone number or password. To provide the service, Firebase receives the ID, the times the account was created and last used, your IP address and basic device and app information; Google keeps IP addresses from sign-ins for a few weeks for security.

The ID is shown as "Player ID" in the App's Settings, where a tap copies it. It lets us recognise an install when you write to support. The App does not attach it to advertising or analytics, and your progress is not uploaded with it. The game plays the same if the sign-in fails or you are offline.

Uninstalling the App, or clearing its data, removes the account from your device, and a new install gets a new ID. To have the account itself deleted from Firebase, email us your Player ID at support.toolverse@gmail.com and we will delete it within 30 days.

Purchases

Where the App offers in-app purchases, such as Remove Ads or hint packs, they are sold through Google Play Billing or Apple's in-app purchase system. The store processes your payment and shares only the product identifier and a purchase token or receipt with the App so it can grant the item and let you restore it later. We never receive your card, bank or billing details. Refunds follow the store's policy.

Notifications

The App can remind you of the daily challenge and your streak with local notifications scheduled on your device. They are optional, require the notification permission, and can be turned off in the App's settings or your device settings at any time. No push notifications are sent from a server.

Device permissions

Internet access is used only for ads, analytics, crash reports, the anonymous sign-in and Google Play Games. Vibration powers the optional haptic feedback. Notification and boot-completed permissions exist so reminders can be scheduled and survive a restart. The App never asks for location, camera, microphone, contacts or storage access.

Children

The App is not directed at children under 13 (or the age at which consent is required where you live), and we do not knowingly collect personal data from them. If you believe a child has provided data through the App, contact us and we will help remove it.

Sharing and transfers

We do not sell personal data. The only parties that receive data are the processors named above (Google for AdMob, Firebase Analytics, Crashlytics, Firebase Authentication and Play Games; Google Play and Apple for purchases), each under its own terms, and authorities where the law requires it. Google may process data on servers outside your country, including in the United States, under safeguards such as the EU Standard Contractual Clauses.

Your choices and rights

You can reset or opt out of personalised advertising in your device settings (Android: Settings > Google > Ads; iOS: Settings > Privacy & Security > Tracking), change your consent choice when the consent form is shown again, switch reminders off, and delete all local data by uninstalling the App.

Depending on where you live (for example under the GDPR, the UK GDPR or the CCPA) you may have the right to access, correct, delete or export personal data, to object to or restrict its processing, and to complain to a supervisory authority. Because analytics and crash data are keyed to random identifiers, we usually cannot link them to you; tell us the details you have and we will do what we can. The anonymous account is the exception: send us your Player ID (Settings in the App) and we can delete it. Email us at support.toolverse@gmail.com.

Security

All data sent by the Google SDKs travels over encrypted connections. Local data is protected by your device's own security; please use a screen lock.

Changes to this policy

When we change this policy we publish the new version at https://playarrowescape.web.app/privacy with a new effective date. Material changes are also announced inside the App.

Contact

Toolverse - support.toolverse@gmail.com

Email support.toolverse@gmail.com