Privacy policy

1. Who we are and how to contact us

Arrow Galaxy is developed by Yuri Zanatta under the Cactus Forge brand in Brazil. For questions, support or personal-data requests, contact yzanatta@icloud.com. Website: https://cactusforgestudio.com/ (external website).

This policy covers data processing in the game. Apple and Google services also have their own privacy policies.

2. Data kept on your device

The game saves your progress, completed stages, current attempt, play time, selected theme, avatar and display name, as well as preferences such as language, audio, vibration and motion. You can use the default name and avatar; you do not need to provide your real name.

Player and installation identifiers, app version and save revision records help keep progress consistent. The cloud installation identifier is derived from a device identifier and a random code; it should not be regarded as anonymous data.

We do not create a separate Cactus Forge account. Your game profile is not public, and this version does not provide chat or online leaderboards.

3. Cloud synchronization

Synchronization may run automatically when your platform account and the service are available. On iPhone and iPad, we use Apple's Game Center and iCloud. On Android versions where the feature is enabled, we use Google Play Games Saved Games.

The progress and profile data described above, technical installation identifiers and a platform-provided player identifier are sent to that service. Audio, language and vibration preferences stay on your device. The purpose is to resume your journey on compatible devices within the same platform and prevent completed progress from moving backward.

There is no synchronization between Apple and Android. You can play offline; data then stays on your device until the service is available. Cactus Forge does not operate its own save server or a dashboard for viewing the contents of your personal cloud storage.

4. Purchases and restoration

When available, purchases are processed by the platform's store. The game uses store-verified transactions and purchase entitlements to recognize and restore the pack. We do not receive your payment-card details or account password. Your store purchase account may differ from the account used for game cloud saves.

5. Advertising, tracking and analytics

We use Google AdMob (Google Mobile Ads SDK) for gameplay banners, between-stage ads and optional extra-life videos. Google and its advertising providers may process IP addresses and approximate location derived from them, device or app identifiers, crash/performance records and ad interactions for delivery, measurement and fraud prevention. We do not send your profile name or save as advertising parameters.

Before requesting ads, the game checks Google User Messaging Platform (UMP) and presents the applicable form. When required, “Privacy options” appears in Home settings > About the game to review choices. Without permission to request ads, gameplay remains available. This integration does not request ATT permission to access IDFA and disables the publisher first-party identifier; other SDK data is not thereby anonymous.

Buying the pack removes banners and between-stage ads; extra-life videos remain optional, subject to availability and applicable choices. There is no separate Firebase Analytics integration or Cactus Forge analytics service. The platform and store may process diagnostics under their settings. Google advertising information and controls: https://policies.google.com/technologies/ads (external website)

6. Contact, purposes and legal grounds

If you contact us, we process your email address and the information you choose to send to respond to your request. Please do not send passwords, authentication codes, card details or sensitive information.

Data needed to run the game, synchronize through platform services you use and recognize purchases is processed to perform our relationship with you under the terms of use. Security and protection against data loss or misuse may rely on legitimate interests, subject to your rights. We may also process information to meet legal duties, establish or defend rights and, where required, with your consent.

7. Sharing and international transfers

Apple and, where applicable, Google provide the account, storage and store services used by these features. Google AdMob and its advertising providers receive data as described in section 5. We do not sell your personal data. This version does not send your display name to other players.

Platform and email providers may process data in other countries under their services and safeguards. For transfers under our responsibility, we will observe applicable legal requirements. Please also consult:

Apple: https://www.apple.com/legal/privacy/ (external website)

Google: https://policies.google.com/privacy (external website)

8. Retention, deletion and security

Local data remains on your device while retained by the app and operating system. Removing the app may delete the local save, but does not necessarily delete cloud saves or store purchase records. Retention and backups within platform services follow those services' controls and rules.

You can manage account access and storage through your device and platform settings. If you need help finding deletion options, contact yzanatta@icloud.com. We do not have administrative access to your personal Apple or Google account to delete data remotely.

We keep support messages for the time needed to address your request and meet legal duties or protect rights. We use proportionate safeguards, including account isolation and save-integrity checks. These measures do not make devices or data immune to failures or unauthorized access; keep your device and accounts secure.

9. Your rights

Depending on applicable law, you may request confirmation of processing, access, correction, information about sharing, anonymization, restriction or deletion, portability where applicable and review of automated decisions affecting your interests. You may also withdraw consent or object to processing where the law allows.

Send requests to yzanatta@icloud.com. We may request only the information needed to confirm your identity and handle the request safely. We will explain technical limitations or legally required retention. You may also contact the competent data-protection authority, including Brazil's ANPD.

10. Children and teenagers

We consider the best interests of children and teenagers. The game profile does not ask them to provide a real name, age or contact details. Parents or guardians should supervise use, account controls and any purchases, and may contact us about privacy. Parental consent or authorization will be addressed where required by law and the feature offered.

11. Languages and changes

This policy is available in Portuguese and English. The game defaults to Portuguese when that language is selected and English for other game languages; both versions are accessible on the document screen. Updates will be identified by the date above. Material processing changes will be communicated appropriately and do not replace consent where it is required.