Arroway Privacy Policy

Summary

The sections below explain these points in detail.

1. Who we are and scope

Arroway (the “Game”) is published by Malis Games (“Malis Games”, “we”, “us”, “our”), an independent game studio. This policy explains how information is processed when you install and play Arroway on iOS or Android, and when you contact us about it.

This policy does not cover the services of third parties, such as the app stores you download the Game from or the advertisers whose ads appear in the Game. Those parties process information under their own privacy policies. The Malis Games website does not use cookies, analytics or advertising.

You can contact us about privacy at privacy@malisgames.com.

2. What Malis Games controls, and what third parties process

It is important to distinguish between information that Malis Games itself handles and information that third-party service providers process through the software development kits (“SDKs”) built into the Game.

Handled by Malis Games

• On your device: your level progress, settings (such as sound, haptics, theme and language), tutorial status and, where applicable, your privacy choices. This information is stored locally and is not sent to us. There is no account or cloud save, so uninstalling the Game or clearing its data may remove it.
• Analytics reports: we decide which gameplay events the Game records (see section 3) and we view the resulting reports in our analytics provider’s dashboard. These reports are mainly aggregated or linked to pseudonymous identifiers, not to names or contact details.
• Emails you send us: if you contact us, we receive your email address and whatever you include in your message.

Processed by third-party providers

Most of the technical information described below is collected and processed directly by the analytics and advertising providers listed in section 7, under their own privacy policies. In some cases they act as independent controllers of that information. Malis Games does not build or maintain advertising profiles of players; any advertising profiles are created and held by advertising providers, subject to their policies and your choices.

What the Game does not ask for

The Game does not ask you to create an account and does not request your name, email address, phone number, contacts, photos, precise (GPS) location or payment information.

3. Information processed automatically

When you use the Game, the SDKs built into it may automatically process the following categories of information. Exactly what is processed depends on your device, your operating-system settings, where you are, and the choices you make.

• Device information: device type and model, screen size, language and region settings.
• Operating system: platform (iOS or Android) and version.
• App and game version.
• Device and app identifiers: identifiers generated by the analytics provider to recognise an installation over time, and vendor identifiers such as Apple’s Identifier for Vendors (IDFV).
• Advertising identifiers, where permitted: Apple’s Identifier for Advertisers (IDFA) on iOS, and the Google Advertising ID on Android. See section 6 for when these are available.
• Approximate geographic information: such as country or region, typically derived from your IP address. The Game does not request your precise location.
• Network information: IP address and connection type.
• Session information: for example when the Game is opened and how long a session lasts.
• Gameplay and analytics events: for example starting, completing, failing, restarting or leaving a level; moves that were blocked or counted as mistakes; completing milestone levels; and changing settings or language. These events contain game-related values such as level number, attempt counts and elapsed time. They do not contain free text you type.
• Technical and performance information: such as errors or problems that occur while the Game is running.
• Ad impressions and interactions: ad requests, ads shown, clicks, viewing time and whether a full-screen or rewarded ad was completed.
• Consent and privacy choices: the choices you make in consent messages and in the Game’s privacy options, which are stored on your device and passed to providers so they can respect them.

4. Why information is processed

Malis Games does not sell personal information for money.

5. Advertising

Arroway is supported by ads. The Game may use the following advertising services:

• Unity LevelPlay / Unity Ads — LevelPlay is a mediation platform. For each ad opportunity it may request ads from multiple advertising providers and select which ad to show. Unity Ads is one of those providers.
• Google AdMob — an advertising network operated by Google.
• AppLovin — an advertising network that may provide ads through mediation.

Each advertising provider that participates may receive the information described in section 3.

Personalised and non-personalised ads

• Personalised ads are selected using information about your device and activity, which may include activity in other apps and websites linked through identifiers. Personalised ads are shown only where permitted by applicable law and by your choices — for example, only with your consent in regions where consent is required, and on iOS, cross-app tracking only with your App Tracking Transparency permission.
• Non-personalised ads are selected based on context, such as the Game itself and your approximate location, rather than on a profile of your past activity. Non-personalised ads still involve some processing of information, for example to deliver and measure ads, limit how often they are shown and prevent fraud.

6. Consent

Depending on where you are and which device you use, you may see one or both of the following. They are separate mechanisms with different purposes, and a choice made in one does not replace the other.

Privacy and consent message (where required by law)

Users in applicable regions — for example the European Economic Area (EEA), the United Kingdom and Switzerland — may be shown a privacy and consent message before consent-based processing takes place, such as personalised advertising or storing and accessing information on your device for advertising purposes. This message is managed using Google’s User Messaging Platform (UMP), and may use the IAB Transparency & Consent Framework to communicate your choices to advertising providers. Users in some other regions, such as certain US states, may be shown privacy options relevant to their local laws.

Apple App Tracking Transparency (iOS only)

On iOS, the Game may ask for permission through Apple’s App Tracking Transparency (ATT) prompt to track your activity across apps and websites owned by other companies. The Game and its SDKs can access your device’s advertising identifier (IDFA) only if you allow this. If you choose “Ask App Not to Track”, the IDFA is not available to the Game.

Allowing tracking under ATT is not the same as giving consent under European privacy law, and giving consent in the privacy message is not the same as allowing tracking under ATT. Where both apply, both are respected.

Withdrawing consent

You can withdraw or change your consent at any time (see section 8). Withdrawing consent does not affect processing that took place before you withdrew it.

7. Third-party service providers

The Game uses the following third-party services. Each provider processes information under its own privacy policy, which we encourage you to read.

The app stores (Apple App Store and Google Play) also process information about your download and use of apps under their own terms and privacy policies. We may also disclose information where required by law, to protect the rights and safety of players or others, or if the Game is transferred to another publisher, in which case this policy or one offering comparable protection will continue to apply.

8. Your privacy choices

• Privacy Options in the Game: where applicable, Arroway provides a Privacy Options entry in the Game’s settings. You can use it to review, change or withdraw the choices you made in the privacy and consent message.
• iOS tracking permission: you can change whether the Game may track you under ATT at any time in Settings › Privacy & Security › Tracking. See Apple’s guide: If an app asks to track your activity.
• Android advertising ID: you can reset or delete your advertising ID in your device settings (on many devices under Settings › Privacy › Ads or Settings › Google › Ads; the exact location varies by device).
• Google ad settings: you can manage Google ad personalisation at My Ad Center.
• Stop all processing by the Game: uninstall the Game.
• Ask us: email privacy@malisgames.com and we will help where we can.

9. Users in the EEA, United Kingdom and Switzerland

Legal bases

Where the EU General Data Protection Regulation (GDPR), the UK GDPR or the Swiss Federal Act on Data Protection applies, the processing we are responsible for relies on:

• Consent — for personalised advertising, for storing or accessing information on your device where consent is required, and for analytics where consent is required;
• Legitimate interests — for operating and improving the Game, non-personalised advertising, ad measurement, security and fraud prevention, where these interests are not overridden by your interests and rights;
• Legal obligation — where processing is needed to comply with the law.

Your rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information deleted;
• restrict processing, or object to processing based on legitimate interests;
• data portability;
• withdraw consent at any time, using the Privacy Options entry in the Game or by contacting us;
• lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@malisgames.com. Because the Game has no accounts, we may need additional details — such as an identifier from your device — to find information relating to you, and in some cases we may not be able to identify it at all. For information held by third-party providers, you can also contact them directly using the links in section 7.

10. Users in the United States

Several US states have comprehensive privacy laws, and their requirements differ. Depending on the state you live in and subject to the limits in those laws, you may have the right to:

• know about, and access, personal information processed about you;
• correct inaccurate personal information;
• delete personal information;
• opt out of targeted advertising, and of the “sale” or “sharing” of personal information as those terms are defined in your state’s law;
• not be discriminated against for exercising your rights;
• appeal a decision we make about your request, where your state provides this right.

Malis Games does not sell personal information for money. However, the use of advertising identifiers and related information by advertising providers to show personalised ads may be treated as “targeted advertising”, “sharing” or a “sale” under some state laws. You can opt out by limiting ad tracking on your device and using the privacy options in the Game (see section 8), or by contacting us.

The categories of information involved are described in section 3, the purposes in section 4, and the categories of recipients in section 7. To make a request, email privacy@malisgames.com. Where your state allows it, you may use an authorised agent.

11. Children’s privacy

Arroway is not specifically directed to children. It is a general-audience puzzle game. We do not knowingly collect personal information from children in a way that requires parental consent under applicable law.

If you are a parent or guardian and believe your child has provided personal information through the Game, please contact privacy@malisgames.com. We will take appropriate steps, which may include asking the relevant service providers to delete the information.

12. Data retention

Information stored on your device remains there until you delete the Game or clear its data.

Information processed by third-party analytics and advertising providers is retained according to those providers’ own retention policies and, where available, the settings we choose. Where we can configure retention, we aim to keep information only for as long as it is needed for the purposes described in this policy.

Support and privacy emails are kept for as long as needed to handle your request and any follow-up, unless we need to keep them longer to meet legal obligations.

13. Security

We take reasonable measures to protect information under our control, for example by limiting access to provider dashboards and working with established service providers. However, no method of transmission or storage is completely secure, and we cannot guarantee the security of information.

14. International processing

Third-party service providers may process information in countries other than the one you live in, including the United States and other countries where they or their sub-processors operate. These countries may have different data protection laws. Where required, transfers of personal information from the EEA, UK or Switzerland rely on appropriate safeguards — such as Standard Contractual Clauses or adequacy decisions — as provided by the relevant service providers.

15. Changes to this policy

We may update this policy from time to time, for example when the Game’s features or service providers change. The “Last updated” date at the top of this page will reflect the latest changes. If changes are significant, we will take reasonable steps to let you know, for example through a notice in the Game or on this page.

16. Contact