Privacy Policy

1. Application and Publisher Identification

This Privacy Policy governs the mobile application Aroshift: Arrow Logic Puzzle (referred to as "Aroshift", the "Game", "we", "us", or "our"), available on Android under package identifier com.markuting.aroshift.

The Game is developed and published by Markuting (Markuting). If you have any inquiries regarding this policy or our data practices, please refer to the contact details provided in Section 16 below.

2. Contact Details for Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy, you may contact our designated privacy contact at:

3. Information Processed by the Game Itself

Aroshift is built as an offline-first casual puzzle game. We do not require you to create an account, log in with social media (such as Google Sign-In, Facebook, or Apple ID), or disclose your real name, email address, physical address, or phone number.

The core game engine operates locally on your Android device without transmitting your move inputs, puzzle solutions, or time logs to private game servers.

4. Locally Stored Progress and Settings

To provide persistent gameplay and retain your progress between sessions, Aroshift writes data directly to a local SQLite database (vector_flow.db) residing in your device's private application sandbox. This locally stored data includes:

• Level Progression: Stage numbers cleared, star ratings (1 to 3 stars), and stage high scores.
• Virtual Economy: Quantities of in-game Coins and Gems earned strictly through gameplay, daily login rewards, and achievements.
• Player Cosmetics: Equipped and unlocked arrow skins, board themes, color palettes, and particle trail styles.
• Gameplay Settings: User preferences for sound effects (SFX on/off), haptic feedback (vibration on/off), and completed tutorial prompts.
• Milestone Statistics: Total stages cleared, perfect chain moves, and login streak counters.

Note: Because all game progress is stored in local sandbox storage, uninstalling the application or clearing app data via Android system settings will permanently delete your locally saved level progress and virtual currency.

5. Firebase Analytics Data Collection & Purposes (Planned)

Current Build Status: The current release build contains no active Firebase Analytics SDK dependencies in its source code.

Planned Implementation: For upcoming production releases distributed via Google Play, we plan to integrate Google Firebase Analytics (provided by Google LLC) to understand general game balance, stage difficulty, and user engagement.

When active, Firebase Analytics may process the following pseudonymous data points:

• Game Progression Events: Level start, level completed, level failed, and powerup deployment (e.g. Bomb, Rocket).
• Session Metrics: App opens, session duration, and retention metrics.
• Pseudonymous Identifiers: Firebase App Instance ID and mobile operating system identifiers.
• Device & Network Context: Device model, OS version, language preference, approximate geographic region (country/city derived from IP address; IP addresses are not stored permanently by Google Analytics).

We do not merge analytics metrics with personally identifiable information. Analytics data is utilized strictly to identify unbalance in puzzle levels and optimize app stability.

6. Firebase Crashlytics Diagnostic Reporting (Planned)

Current Build Status: The current active build does not initialize the Crashlytics SDK.

Planned Implementation: To ensure reliable performance across the diverse Android hardware ecosystem, we plan to utilize Firebase Crashlytics (provided by Google LLC) in forthcoming production releases.

When active, if the game experiences a crash or unhandled fatal exception, Crashlytics collects diagnostic data consisting of:

• Stack traces and memory state at the exact time of the crash.
• Device make, model, CPU architecture, and free RAM/disk space.
• Operating system version and build number.
• Crashlytics installation UUIDs generated uniquely for that installation.

Crashlytics does not log user names, contacts, or sensitive contents. Diagnostic data is used exclusively to debug and patch stability defects.

7. Advertising SDK Data Collection & Sharing (Planned)

Planned Advertising: We plan to integrate mobile advertising in a subsequent release to support free gameplay (specifically optional rewarded video ads that award in-game Coins or puzzle hints).

Once an advertising provider is integrated into a published build:

• This policy will be amended to name the verified ad provider and link directly to its privacy documentation.
• The ad network may collect and process device advertising identifiers (such as the Google Advertising ID / GAID), IP addresses, and interaction events for ad frequency capping, fraud prevention, and performance reporting.
• Where required by applicable regulations (such as GDPR/UK GDPR or Google Play Families Policy), users will be presented with appropriate consent management dialogs before any personalized ad delivery occurs.

8. Device Identifiers and Technical Diagnostics

In the release build:

• Aroshift requests zero runtime permissions in its Android manifest (no camera, microphone, contacts, location, or storage permissions).
• The release manifest contains no declared android.permission.INTERNET requirement in the current build. When Firebase or advertising services are activated in production updates, internet access will be declared strictly for diagnostic telemetry and ad retrieval.
• The game does not read hardware serial numbers, IMEI, or MAC addresses.

9. Data Recipients and Third-Party Providers

We do not sell, rent, or trade your personal data. When third-party developer services are active, data is received solely by vetted service providers acting on our behalf:

10. Data Retention and Deletion Practices

Local Game Data: Retained on your device indefinitely until you choose to uninstall the game or clear storage through Android Settings. You may delete all local progress at any time by going to Android Settings > Apps > Aroshift > Storage > Clear Data.

Third-Party Telemetry: Aggregated, pseudonymous analytics and crash reports transmitted to Google Firebase are retained in accordance with Google's standard data retention policies (typically 2 to 14 months for analytics metrics; up to 90 days for raw crash traces), after which they are automatically expunged or aggregated into non-identifiable statistics.

Because we do not maintain centralized user accounts or store personal user identifiers on custom servers, we cannot correlate anonymous device logs with a specific natural person upon request.

11. Security and Data Transmission

We implement industry-standard safeguards to protect data integrity:

• Local progress is isolated within Android's internal application sandbox, preventing unauthorized access by other third-party apps.
• When online services are active, all communications with Google Firebase or Google Play infrastructure utilize Transport Layer Security (HTTPS/TLS) encryption.

12. Children's Privacy and Intended Age Groups

Aroshift is designed as a family-friendly casual logic puzzle suitable for general audiences.

• We do not knowingly collect personal information from children under the age of 13 (or under 16 in the European Economic Area).
• The game does not contain chat rooms, public messaging, user-generated content, or profile picture sharing with other players.
• If we learn that personal data of a child has been inadvertently gathered without verified parental consent, we will take prompt steps to delete such data.
• Parents or guardians with questions regarding our children's privacy practices may contact us at info@markuting.com.

13. Regional Privacy Rights (GDPR, UK GDPR, CCPA/CPRA)

Depending on your country or state of residence, you may possess specific legal rights regarding your data:

• European Union & UK Residents (GDPR / UK GDPR): You have rights of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. Our legal basis for processing diagnostic metrics is our legitimate interest in maintaining and improving game stability.
• California Residents (CCPA / CPRA): You have the right to know what categories of personal information are collected, request deletion, and opt out of the sale or sharing of personal information. We do not sell your personal information.

To exercise any applicable statutory rights, please submit a request to info@markuting.com. Because Aroshift does not maintain user accounts, requests relating to anonymous telemetry must provide the technical installation identifier where applicable.

14. International Data Transfers

When third-party services like Google Firebase or Google Play operate, diagnostic and analytics data may be transferred to and processed on secure servers located in the United States and other countries outside your jurisdiction. Google LLC adheres to international data transfer mechanisms, including standard contractual clauses approved by the European Commission.

15. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our gameplay features, legal obligations, or technical SDK integrations (such as the activation of advertising or analytics services).

Any changes will be posted directly to this URL with a revised "Last updated" date. We encourage you to review this page periodically. Continued use of the Game following updates constitutes acceptance of the revised policy.