1. The Short Version

• There is no account, no login and no registration. We never ask for your name, email, phone number, contacts or photos.
• Your progress lives on your device. Uninstalling the App deletes it.
• The App is free and supported by ads from Google AdMob, which uses advertising identifiers as described in Section 4. In the EU/EEA, UK and Switzerland a consent form is shown first, and you can change your choice at any time from Settings → Ad privacy options.
• We measure how the game is played using two tools: our own server (Section 3) and Google Firebase (Section 5). Neither receives anything that identifies you personally.
• We never use GPS or location services. The only "location" anywhere in this policy is the country your device's language is set to, and the approximate region Google infers from your IP address for ads.

2. Information Stored on Your Device

Everything the game needs to remember is kept locally: unlocked levels, stars, coins and stored hearts, the board you are in the middle of (so leaving the App loses nothing), daily-challenge progress and trophies, achievements, streaks, your language, sound, vibration and dark-mode settings, and how many times our own in-app promotions have been shown to you (Section 6). This data is written to the App's private storage and, on both platforms, mirrored to the operating system's app preferences so that it survives the system clearing web storage. It is not uploaded anywhere, it is not backed up to any server of ours, and uninstalling the App erases all of it.

3. Our Own Analytics (api.northbytelab.com)

The App sends usage events to a server we operate ourselves at api.northbytelab.com. Each batch carries exactly these things and nothing else:

• an install identifier — a random value created on your device the first time you play. It is not your advertising ID, not a hardware identifier, and it is tied to no account, because there are none. Deleting the App destroys it; reinstalling produces a new, unconnected one;
• the platform (iOS or Android) and the App version;
• a two-letter country code read from your device's language settings — not from GPS and not from your IP address;
• the events themselves, from a fixed list: the App opening, a screen being viewed, a level starting (and whether it was resumed), a level won (with stars, whether a hint was used, and the coin reward) or lost, whether a rewarded ad was completed or refused, whether one of our own promotions was shown or tapped, and — if the App hits an internal error — a short technical description of it.

Our server necessarily sees your IP address, as every internet service does. It is used only in memory to stop one address from flooding the service and is never written to a database or a log. Individual events are deleted after 90 days; what remains are daily totals (how many levels were played, on which platform) that cannot be traced back to any device. Events are queued on your device while you are offline and sent later; if our server is unreachable they are simply kept until it is, and the game is not affected in any way.

4. Third-Party Advertising (Google AdMob)

The App shows banner, interstitial and rewarded-video ads served by Google AdMob, part of Google LLC. To serve and measure ads, Google's SDK may collect and process:

• your device's advertising identifier (Google Advertising ID on Android, IDFA on iOS — on iOS only if you allow it in the App Tracking Transparency prompt);
• your IP address, from which Google may infer an approximate location;
• device and app information (model, operating system, language, App version) and ad interaction data (which ads were shown, viewed or tapped);
• diagnostic data about the SDK's own performance.

We do not receive this data ourselves. How Google uses it is described in Google's Privacy Policy and How Google uses information from sites or apps that use its services.

Consent in the EU/EEA, UK and Switzerland

Before any ad is requested, the App shows Google's consent form (the "User Messaging Platform"). Declining personalised ads does not remove ads; it limits them to non-personalised ones. You can review or change your choice at any time from Settings → Ad privacy options inside the App.

Opting out elsewhere

On iOS, choose "Ask App Not to Track" when prompted, or later under Settings → Privacy & Security → Tracking. On Android, reset or delete your advertising ID under Settings → Google → Ads. Personalised advertising can also be turned off in Google Ad Settings.

5. Firebase Analytics & Crashlytics (Google)

The App also reports the same usage events described in Section 3 to Google Firebase Analytics, as a second, independent measurement, and reports crashes and internal errors to Firebase Crashlytics so that we can fix them. For this, Google's SDKs collect a Firebase-generated app-instance identifier, device model and operating system version, App version, coarse region derived from your IP address, and — for crashes — a technical trace of what the App was doing at the time. Firebase does not receive your name or any contact detail, because the App does not have them. Google's handling of this data is described in Privacy and Security in Firebase. No feature of the game depends on Firebase: if it is unreachable, the App works exactly the same.

6. Our Own In-App Promotions

Some of what looks like an ad in Arrow Escape is ours: a small card on the home screen or on the level-complete sheet, or a thin strip above the tab bar, telling you about another NorthByte Lab app. These are fetched from our own server and carry no advertising identifier and no tracking of any kind. Your device only tells our server the App, platform, version and the country from your language settings, so that we can show the right promotion; how often each has been shown to you is counted on your device, and only the totals (how many times a promotion was shown and tapped, across everyone) are sent back. Tapping one opens a link in your browser, at which point that site's own privacy policy applies.

7. Weekly Challenge Content

The weekly challenge is bundled with the App. If a future version downloads new weekly puzzles from our server, that request carries no identifier and no personal data — it is the same as loading a web page.

8. Children's Privacy

Arrow Escape is not directed at children under 13 (or the equivalent minimum age in your region), and it is not enrolled in any children's program on the app stores. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at the address below and we will delete it.

9. Data Retention & Deletion

This section covers Arrow Escape: Gridbreak, published by NorthByte Lab (Smart Life Solutions Group LLC).

There is no account to delete. The App has no sign-up, no login and no profile. Your progress lives only in your device's storage, so uninstalling the App deletes all of it, together with the random install identifier described in Section 3. Nothing remains that we could connect to you.

To request deletion of usage events already sent to us, email support@northbytelab.com with the subject "Arrow Escape — data deletion" and tell us roughly when and on which platform you played; those events carry no name or contact detail, so that is the only way we can locate them. We answer within 30 days. In any case, individual events are deleted automatically after 90 days.

10. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or object to the processing of your data (for example under the GDPR in the EU/EEA and UK, or the CCPA/CPRA in California). Requests about advertising data should go to Google using the links in Section 4, since we never receive it. For the usage events we do hold, write to us at the address below; please say roughly when and on which platform you played, because those events contain nothing we could match to an email address. Uninstalling is the fastest way to stop any further collection.

In the EU/EEA and UK, our lawful basis for the usage events in Sections 3 and 5 is our legitimate interest in understanding whether the game works and in fixing crashes; for personalised advertising it is your consent, given or refused in the form described in Section 4. We do not sell personal information and we do not share it for cross-context behavioural advertising beyond what Google AdMob does when serving ads, which you can opt out of as described above.

11. Security & International Transfers

All traffic between the App and our server, Google AdMob and Firebase is encrypted in transit (TLS). Google processes data on servers worldwide under its own safeguards, including standard contractual clauses for transfers out of the EU/EEA and UK. Our own server is operated for us by a hosting provider and holds only the pseudonymous events described in Section 3.

12. Changes to This Policy

We may update this Privacy Policy from time to time, for example if we add features or change providers. We will update the "Last updated" date above and, for material changes, note it inside the App. Continued use of the App after a change means you accept the updated policy.