Effective date: August 11, 2026 · Last updated: August 14, 2026
This Privacy Policy explains how Arrow Escape (Android package com.akash604.arrowescape), published on Google Play by codex1, handles information. It is written for the version of the game available today, and it describes only things this game actually does. Where something is planned but not yet built, it is listed under Features that are not active rather than described as if it already worked.
Arrow Escape is developed and published by Akash Modak, an independent developer trading on Google Play as codex1, at 178 Rowta, near Koupati State Bank of India, Khajuabeel, Udalguri 784113, Assam, India. For anything covered by this policy you can reach us at contact@getwearlotry.com. We read and answer that address ourselves; there is no support desk between you and us.
For the very limited processing described here, codex1 is the controller under the EU/UK GDPR and the Data Fiduciary under India's Digital Personal Data Protection Act, 2023. Because we operate no backend and process no personal data on our own systems, our role is mostly limited to deciding that Arrow Escape uses Google AdMob at all, to running the consent step, and to giving you the controls described below. Google, once it receives ad data, acts as an independent controller for its own purposes.
We are small enough that we are not required to appoint a Data Protection Officer, and we are not a Significant Data Fiduciary under the DPDP Act. Please send all privacy questions, requests and complaints to the address above; the same address serves as our Grievance Officer contact for Indian users.
We are established in India and have not appointed a representative in the European Economic Area or the United Kingdom. We consider the exemption in Article 27(2)(a) to apply, because the processing connected with this game is limited and occasional, involves no special categories of data, and is unlikely to result in a risk to your rights and freedoms. If that ceases to be true we will appoint a representative and name them here. In the meantime, EEA and UK players can reach us directly at contact@getwearlotry.com, which we monitor ourselves and answer within 30 days.
This policy is also linked from inside the game and is published at https://www.getwearlotry.com/arrow-escape/privacy.html. Our Terms of Service are at https://www.getwearlotry.com/arrow-escape/terms.html.
It is easier to start with what is absent, because most of it is:
ACCESS_FINE_LOCATION or ACCESS_COARSE_LOCATION permission at all, so it cannot read GPS.Apart from serving ads, the game works fully offline. You can put the phone in airplane mode and play every level.
Arrow Escape writes one save file, arrowescape_save.json, in the app's private storage area. If you are signed in to Google Play Games it is also copied to your own Google account as a saved game (see Google Play Games Services); if you play signed out it never leaves your device. Either way we never receive it, and no other app on your phone can read it. Its contents are:
Why: so the game remembers where you were, so your coins and boosters survive a restart, so daily rewards can only be claimed once a day, and so your sound, haptics and theme choices persist. That is the whole purpose.
None of this is personal data in the ordinary sense — there is no name, email address or device identifier in the file that points at a person. While you play signed out it is never transmitted anywhere. If you choose to sign in to Google Play Games, the same file is copied to your own Google account as a backup, and we declare that in our Google Play Data safety form. It is still never sent to us, and we operate no server that could receive it.
Arrow Escape includes the Google Mobile Ads SDK (version 11.3.0) and shows advertising supplied by Google AdMob. This is how a free game with no paywall pays for itself.
Arrow Escape shows three kinds of ad. A banner sits at the bottom of the play screen. A full-screen advert can appear after you finish a level, when you tap Next Level — from level 6 onwards, and at most three times in a play session. Rewarded videos are entirely optional: one plays only if you tap a button to trade a video for a revive, an extra hint, an eraser or doubled coins, and nothing in the game is locked behind watching one. Nothing full-screen appears when you launch the app, when a level starts, or when you press back.
One thing worth being precise about, because it is easy to assume otherwise: to make the reward buttons responsive, the Mobile Ads SDK starts and fetches one rewarded video and one full-screen advert in the background when the game launches (after your consent choice, where one is required). Those requests already involve the identifiers listed below, even if you never watch a video and never reach a level where a full-screen advert can appear. What you control by not tapping is whether a video is ever shown to you and whether further ads are fetched — not whether the first request happens.
When an ad is requested and shown, Google may collect or receive:
ACCESS_ADSERVICES_* permissions in the app manifest. These are Google's measurement and interest-signal mechanisms, not an attribution SDK of ours, and we receive nothing from them.Google uses this for serving and measuring ads, for analytics about ad performance, and for fraud prevention and security. Where you have consented to personalised advertising, Google may also use it to tailor which ads you see.
Google acts as an independent controller for the data it collects through the Mobile Ads SDK and for everything it does with that data afterwards. We do not receive a copy of it, we cannot query it, and we cannot delete it on your behalf.
For the moment the SDK collects and transmits data from your device, we and Google share responsibility, because we chose to include the SDK and we run the consent step. That is why the consent control sits inside the game. For what Google does with the data afterwards, Google decides alone, and rights requests about that must go to Google — but if you write to us we will tell you where to send them and help where we can. Google's handling of that data is governed by its own policies:
We do not control which advertisers appear. We configure AdMob's ad content rating and blocking controls to match the game's Play content rating.
Arrow Escape integrates Google's User Messaging Platform (UMP), which presents a consent form provided by Google.
If you are in the European Economic Area, the United Kingdom or Switzerland, that form is shown before ads are requested. It explains that the game and its advertising partners would like to store and access information on your device — including advertising identifiers — in order to keep the game free, to select and measure advertising, and to prevent fraud. It offers three choices:
If you decline, we do not request ads at all — not the banner, not the full-screen advert, not rewarded videos. Every level remains fully playable, and you can still earn coins, hints and erasers by playing. Declining costs you nothing except the optional shortcut that watching a video would have given.
An earlier build of the game had a defect here, which we described on this page: if the consent machinery failed, the game requested an ad anyway. That is fixed. The ads SDK is now not started at all until Google's consent service confirms that ads may be requested, and every individual ad request re-checks that answer rather than trusting an earlier one. If the consent step fails — no network, a service error — the game retries it in the background and simply shows no ads until it succeeds. If you decline, that answer is respected for the session and any advert already loaded is discarded.
Today Google's consent form is configured for the EEA, the UK and Switzerland. In other countries — including India — no in-app consent form is shown, and ads are requested on the basis of the notice in this policy and the device-level advertising controls described below. We are extending the consent form to further regions; see the India section for what that means there.
You can reopen the consent form at any time from inside the game: Me > Privacy Rights > Ad Preferences > Change Consent. Withdrawing consent is exactly as easy as giving it, takes effect for everything that happens afterwards, and does not make the processing that already happened unlawful. Where Google's privacy-options requirement does not currently apply to your region, that Change Consent entry does not appear — in that case use the advertising-ID controls below, or write to us.
You can also limit ad personalisation at the operating-system level by resetting or deleting your advertising ID (see below). That works everywhere, regardless of region.
The game collects no contact details, but if you email contact@getwearlotry.com we necessarily hold your email address and whatever you write. To be complete about it:
getwearlotry.com domain, hosted for us by our email provider, which acts as a processor on our behalf and does not use the contents for its own purposes.Apart from correspondence you send us, we hold no record about you at all.
Where the GDPR or UK GDPR applies, we rely on the following:
| Purpose | Data involved | Legal basis |
|---|---|---|
| Saving your game progress, coins, boosters, streaks and settings so the game works between sessions | The contents of arrowescape_save.json, held only on your device |
Article 6(1)(b) — providing the game you asked for. The Play Games copy is held in your own Google account, under your control rather than ours. Because Google may sign you in automatically where your device already has a Play Games profile, the way to stop the backup is Google's Play Games app — turn off automatic sign-in for this game — and you can delete the saved game there too. |
| Storing and reading the advertising identifier and related device information in order to request and serve advertising — the banner, the full-screen advert and rewarded videos alike | Advertising ID (AAID), IP address, device info | Consent — Article 6(1)(a) GDPR, and consent for device storage access under the ePrivacy rules, collected through the UMP form. |
| Personalising ads and measuring their performance | Advertising ID, IP-derived approximate location, ad interaction data, Privacy Sandbox measurement signals | Consent — Article 6(1)(a). We do not rely on legitimate interests for advertising. |
| Fraud prevention and invalid-traffic detection by the ad network | Device identifiers, IP address, ad interaction signals | Google's legitimate interests as an independent controller, in keeping its ad system free of fraud, alongside the consent obtained for the underlying device access. |
| Completing an in-app purchase and delivering what you bought | Handled by Google Play as seller of record. The app receives only which product was bought and that it succeeded, and stores the resulting coins, boosters or ads-removed flag in the local save file — which is included in the Play Games backup if you are signed in. No receipt, order ID or price is stored. | Performance of a contract — Article 6(1)(b): between you and Google Play as the seller, and between you and us for delivering the item inside the game. |
| Answering a privacy question or request you send us | Your email address and whatever you write in the message | Legal obligation — Article 6(1)(c) where a data-subject right is engaged, otherwise our legitimate interest in replying to correspondence. |
Providing any of this is voluntary. Nothing is statutorily or contractually required, and declining ad consent does not restrict any part of the game. We do not carry out automated decision-making that produces legal or similarly significant effects about you. Ad partners do profile for the purpose of selecting which ad to show; that is disclosed in the consent form and is not a decision with legal effect.
The save file stays on your device for as long as the app is installed. We set no expiry, because we have no way to reach it. It is deleted when you:
An important difference between those routes. Uninstalling or clearing storage removes the save file on the device only. If you are signed in to Google Play Games, the saved game held in your own Google account survives, and your progress is restored the next time you sign in. That is deliberate — it is what makes changing phone work — but it means uninstalling is not a way to erase your progress. To remove the cloud copy as well, use DELETE MY DATA in the game, or delete the saved game yourself from the Google Play Games app.
All of these are irreversible for us: we hold no backup and could not restore your progress even if you asked.
We operate no servers, no database and no account system, so the game creates no record about you for us to retain, export or erase. The one exception is correspondence: if you email us, we hold your address and message for up to 24 months as described under Correspondence with us, and then delete it.
The advertising ID belongs to Android, not to us, so you control it from system settings. On most devices:
Two honest caveats, because they are easy to misread: deleting or resetting the advertising ID does not remove ads and does not change how many ads you see. The banner and the full-screen advert after a level appear either way. There are two ways to stop them entirely: the one-time Remove Ads purchase, or declining ad consent where the consent form is shown. Note that only rewarded videos are ones you choose to watch. Resetting or deleting the ID only makes the ads you do see less relevant to your interests.
Purchase records — we keep none. Google Play is the seller for everything in the shop. It holds the order, the price you paid, the date and any refund history under its own retention schedule and its own Privacy Policy; we never receive that record and cannot delete it for you. Inside the game the only thing stored is the outcome — coins added to your balance, boosters, or the ads-removed flag — with no receipt, order ID or price. Erasing your save does not revoke a purchase: Remove Ads stays with your Google account and is restored from Google Play, not from your save file.
Data Google collected through the Mobile Ads SDK is retained under Google's own schedules and is subject to Google's controls, not ours. Use Google My Ad Center and your Google Account settings, or the tools described in Google's partner-sites policy.
If you would rather have it in writing, email contact@getwearlotry.com with "Data deletion — Arrow Escape" in the subject. We will confirm within 30 days what we hold — which, unless you have written to us before, is nothing — delete any correspondence of yours that we still hold, and point you to the steps above for the save file and the advertising ID. Because there are no accounts in Arrow Escape, there is no account for us to close.
You have the right to access your personal data, to rectify it, to erase it, to restrict or object to processing, to data portability, and to withdraw consent at any time. In practice, the only data we hold is any email you have sent us, so an access or erasure request is answered either with a copy of that correspondence or by telling you that no record exists. Withdrawal of ad consent is immediate and self-service via Me > Privacy Rights > Ad Preferences > Change Consent. Requests to us are free and answered within one month, extendable by two months for complex requests, in which case we will tell you why.
You may also complain to a supervisory authority — in the EU, the data protection authority of the country where you live or work (the list is at edpb.europa.eu); in the UK, the Information Commissioner's Office at ico.org.uk.
For rights relating to advertising data that Google holds as an independent controller, please direct requests to Google using the links above; we cannot action them ourselves, but if you write to us we will tell you exactly where to send them and help where we can.
We receive no money for your personal information from anyone other than ad revenue from Google. Under California law, however, disclosing identifiers such as an advertising ID and IP address to an advertising network for cross-context behavioural advertising counts as both a "sale" (disclosure for other valuable consideration) and a "share". We treat it as both, and we offer the opt-out below on that basis. That disclosure occurs whenever an ad is requested or watched.
The categories involved are identifiers (advertising ID, IP address), internet or network activity (ad interactions and advertising measurement signals), and approximate geolocation inferred from IP. They are disclosed to Google for advertising, analytics and fraud-prevention purposes. We collect no sensitive personal information and do not use any information to infer characteristics about you. We retain none of these categories ourselves — we never receive them. Google retains ad data under its own schedules, described in Google's Privacy Policy. The only information we ever hold is correspondence you send us, which we keep for up to 24 months.
To opt out of sale/sharing, use either of these, both of which work regardless of your region:
If the in-game Me > Privacy Rights > Ad Preferences > Change Consent entry is visible to you, you can also decline personalised advertising there. That entry currently appears only where Google's consent framework requires a privacy-options control — at present the EEA, the UK and Switzerland — which is why the two mechanisms above are the ones we point U.S. residents to. Arrow Escape is a native Android app with no browser component, so it cannot receive browser-based opt-out preference signals such as Global Privacy Control; please use the advertising-ID controls or email us instead.
Depending on your state you may also have the right to know/access, correct, delete, obtain a portable copy, opt out of targeted advertising and profiling, and to appeal a decision we make on your request. We will not discriminate against you for exercising any of these rights — the game plays identically either way. You may use an authorised agent. We respond within 45 days, extendable once where permitted, at no charge. To appeal a refused request, reply to our decision email with "Appeal" in the subject.
If you are in India, you have the right to a summary of the personal data we process and of our processing, the right to correction, completion, updating and erasure, the right to grievance redressal, and the right to nominate another person to exercise your rights on your behalf in the event of death or incapacity. You also have the right to withdraw consent as easily as you gave it.
Because Arrow Escape stores everything on your device and we operate no servers, the practical answer to an access or erasure request is that we hold nothing beyond any email you have sent us — your game data is in your hands, and uninstalling removes it.
The one thing that leaves your device is the optional advertising described above, and we should be exact about how that stands today. Google's in-app consent form is currently configured for the EEA, the UK and Switzerland, so an Indian player is not shown that form; the notice in this policy is the notice you get, and the device-level advertising-ID controls are the control you have. We are publishing a consent message covering India so that a notice and a consent choice precede any ad request, and so that the in-game Change Consent entry appears here too; until that is live you can stop personalised advertising by deleting the advertising ID in Android Settings, or write to us and we will confirm your preference. This policy and the date at the top will be updated when the change ships.
Grievance Officer: Akash Modak (trading as codex1), 178 Rowta, near Koupati State Bank of India, Khajuabeel, Udalguri 784113, Assam, India — contact@getwearlotry.com. We aim to resolve grievances within 30 days and in all cases within the 90-day statutory period. If you are not satisfied, you may complain to the Data Protection Board of India. This policy is published in English; a Hindi version is being prepared and will be linked here at /arrow-escape/privacy-hi.html when it is published. If you need it in Hindi before then, or in another language listed in the Eighth Schedule to the Constitution, write to us and we will arrange a translation.
Arrow Escape is a general-audience puzzle game. It is not directed to children, and it is not listed for a child audience on Google Play. We do not knowingly collect personal information from children under 13, and because there is no sign-up, no profile and no messaging in the game, there is nothing for a child to submit to us.
We do not operate a verified-parental-consent process, because the game is not designed for children and does not collect information that would require one. If we learn that we have somehow received personal information from a child under 13 — which in practice could only happen by email — we will delete it promptly. Parents or guardians who believe this has happened can write to contact@getwearlotry.com.
Age thresholds differ by country — 13 under U.S. children's privacy law, 13 to 16 for consent to online services in EU member states, and 18 under India's DPDP Act. We will not pretend to a capability we do not have: because there is no sign-up and we ask for no age, we cannot detect a player's age, and the game applies no age-based ad treatment. What we do instead is keep ads to a content rating suitable for the game and rely on AdMob's blocking controls. If a young player has been using the game, deleting the advertising ID in Android Settings is the most reliable way to stop personalised advertising on that device, and a parent or guardian can also write to us. If we add an age signal to the game, we will update this policy before it ships.
We are based in India and hold no personal data from the game itself, so there is nothing we export; the only exception is correspondence you send us, covered under Correspondence with us. The transfers that matter here are Google's: when an ad is requested, the request goes to Google's advertising infrastructure, which operates globally and includes servers in the United States and elsewhere. Google carries out those transfers as an independent controller, relying on its own safeguards — standard contractual clauses and, where applicable, the EU–U.S. Data Privacy Framework. Details are in Google's Privacy Policy.
Your save file sits in Arrow Escape's private, sandboxed storage, which Android isolates from other apps on the device. It is not uploaded anywhere. The strongest protection for it is the one you already use: your device lock screen and keeping your phone's software up to date.
Communication between the Google Mobile Ads SDK and Google's servers is encrypted in transit using TLS. We install the SDK from Google's official distribution and keep it updated. No system is perfectly secure, but the honest summary is that we minimise risk by not collecting anything in the first place — there is no database of ours to breach.
Because we hold no contact details for players, we cannot email you if something goes wrong. If an incident affecting personal data connected to the game ever occurred, we would post a notice on this page and inside the game, notify the relevant supervisory authority within 72 hours where the GDPR or UK GDPR applies, and intimate the Data Protection Board of India as required, with the detailed particulars within the period the DPDP rules set. Most ad-related data sits with Google, and Google would notify under its own obligations.
Tapping an advertisement may take you out of Arrow Escape and into a browser, the Play Store or another app. Once that happens, you are on someone else's property and their privacy policy applies, not ours. We do not choose which advertisers appear, do not endorse them, and are not responsible for their content or their data practices. Please read their policies before providing information to them.
To avoid any ambiguity, these are things Arrow Escape does not do today:
If we ever enable such features, they would be optional, they would be announced in the game, and this policy would be updated before they went live.
Arrow Escape uses Google Play Games Services for two optional things: achievements and a backup of your progress. Both require you to be signed in to Google Play Games on your device. Signing in is your choice — the game is fully playable as a guest, with every level, every reward and every setting working exactly the same.
When you are signed in:
Google's handling of that data is governed by Google's Privacy Policy and the Play Games Services terms. You can review or remove Play Games data for this game from the Google Play Games app, and you can play as a guest at any time by not signing in.
Deleting it. "Delete my data" inside the game erases the local save. If you are signed in to Play Games it also overwrites the cloud copy in the same action; if you are signed out at the time, the game remembers and overwrites it the next time you sign in, before restoring anything. You can also delete the saved game yourself from the Google Play Games app.
We will update this page if the game changes — for example if we add a new ad format, a new SDK, in-app purchases, or an online feature. The Last updated date at the top always reflects the current version. Where a change affects something you previously consented to, we will ask you again through the consent form rather than assume. From this version onward we keep a dated copy of each published version and will send you one on request. We also keep our Google Play Data safety declaration consistent with this policy whenever either one changes.
For any privacy question, request, complaint or correction:
com.akash604.arrowescapeWe answer every message ourselves, usually within a few days.