ArrowsPrivacy Policy
Last updated: September 17, 2026 · English
This policy explains how Arrows 3D handles information through its website and game, including the web version and official iOS and Android versions when available. It describes current features; planned sign-in and payment features are not active.
Who to contact
Arrows 3D is published by AstraPlay Games. For privacy questions or requests concerning Arrows 3D, contact mail@arrows3d.com. This policy applies to our service; external stores and services have their own privacy policies.
Information stored on your device
The game stores campaign progress, preferences such as language and sound, achievements, practice records, and pending daily-score submissions in browser or app web storage. The website stores your theme preference. These local records are used to remember your choices and resume play. Campaign progress is not currently synchronized to a verified cloud account.
Guest identification and sessions
The game uses the FingerprintJS browser library to derive a guest identifier from browser and device characteristics. That identifier is sent to our game server, which stores a cryptographic hash linked to a generated player ID. This is pseudonymous information, not anonymous information. We use it to recognize guest players and associate ranked attempts and scores. An essential HttpOnly session cookie, arrows_session, lasts up to one year; server session tokens are stored as hashes. Clearing cookies alone may not prevent a browser from being recognized again.
Challenge records and public rankings
For ranked daily play, our servers process the guest player ID, challenge date, attempt identifier and start time, completion time, moves, misses, and submitted move sequence to validate results and prevent invalid scores. Rankings publicly show a player number, rank, completion time, moves, and misses. They are visible in the game and on the website. Do not treat a leaderboard entry as private.
Website analytics and technical information
The website uses Google Analytics to measure visits and use of the site. Google may process cookie identifiers, page and interaction information, referring pages, browser and device details, and approximate location derived from network information. Our hosting provider, Cloudflare, processes network and request information, such as IP addresses, to deliver and secure the website and game. If you contact us, we receive your contact details and the information you send. Do not send passwords or sensitive identity documents.
Why information is used
Information is used to deliver gameplay, remember settings, recognize guest players, validate results, display rankings, maintain security, understand website usage, and respond to support and privacy requests. Where applicable data-protection law requires a legal basis, service delivery relies on performance of the service agreement; security and support rely on legitimate interests where permitted; optional processing that requires consent must rely on that consent.
Providers and disclosure
Cloudflare provides hosting, content delivery, and database infrastructure. Google provides website analytics. Data may also be disclosed when required by law or reasonably necessary to protect users and the service. Public ranking information is available to other visitors. The current game has no advertising or enabled purchases. Read Cloudflare’s privacy policy and Google’s privacy policy. Apple and Google separately process store activity under their own policies when you use their stores.
Retention
Local information remains until it is reset, overwritten, or cleared from your browser or app. Session credentials expire after up to one year; expiration does not itself erase historical database records. Guest mappings and challenge records are retained to recognize players and maintain historical rankings; the current service has no automatic age-based deletion schedule for these records. Support correspondence and infrastructure or analytics records follow the applicable operational or provider retention settings. You can request deletion as described below; records required for legal obligations or security may be retained when necessary.
Your choices and data deletion
You can clear local progress and preferences through your browser’s site-data controls or your device’s app-data controls. This does not delete server-side guest records or public scores. To request access, correction, or deletion of Arrows 3D data, email mail@arrows3d.com with the subject “Arrows 3D data deletion” and, if known, your player number and relevant challenge dates. We may need additional information to verify the request without exposing another player’s data. If we cannot identify a record, we will explain that limitation. We will respond under applicable law and explain any necessary retention. You may also have rights to object, restrict processing, obtain a copy, withdraw consent, or complain to your local data-protection authority. Browser controls can block or delete cookies, and Google offers an Analytics opt-out browser add-on.
Children
Please involve a parent or guardian if you are below the age at which you can make privacy decisions in your country. The game does not ask players to submit their age. If you believe a child has provided personal information that should not be processed, contact us so we can investigate and address it.
Security and international processing
We use HTTPS and restrict access to server-side data, but no storage or transmission system is completely secure. Hosting and analytics providers may process information in countries other than your own. Applicable protections and international-transfer requirements depend on your location and the provider arrangements.
Changes to this policy
We will update this page and its date when our practices change. Material changes, including new account, payment, or data collection features, will require updated disclosures and any consent required by applicable law.