ARROW SHIFT · Android Privacy Policy

1. Scope and responsible publisher

This policy covers ARROW SHIFT for Android, published by Luthfi Studio, and the game configuration, content and policy web services linked by this version. Luthfi Studio explains the processing for which it is responsible and provides the contact below. The other platform has a separate policy; use the publisher and platform named on this page.

Privacy and support contact: kazutokirigayakirito354@gmail.com. No account or sign-in is required. Playing does not require consent to advertising, payments or optional diagnostics.

2. On-device saves and system backups

The game stores level progress, move replays, virtual coins, depot appearance, skins, tutorial status and settings such as language, sound, haptics and diagnostic choice on your device. This supports continued play, recovery and one-time completion rewards. The game does not upload these saves as a publisher cloud-save service.

Use the operating system's app-data controls or uninstall the app to remove local records. For the web preview, clear this site's browser storage. The publisher cannot restore these local records from its servers. Android/iOS backup, device migration or backups you create may separately retain or restore app data. Manage those copies and their deletion through the relevant operating system or backup service. System backup is separate from an in-game cloud-save feature.

3. Necessary connections and technical access data

At startup the game requests version information, gameplay configuration and content manifests from the game service over an encrypted connection. Full policy and terms pages also require a connection. These requests do not include your complete local save, name, email, advertising ID or a persistent device identifier.

Network and hosting gateways process technical access data such as IP address, request path and time, response status, and protocol or software information actually sent by the client. Service providers host the backend and policy pages; the app's current region is Singapore (SG). This processing delivers the service, protects it and supports troubleshooting, rather than advertising profiles. Turning off optional diagnostics does not prevent these necessary connections. Bundled core levels and local saves remain available offline.

4. Optional gameplay diagnostics: off by default

Optional diagnostics are not available in the current release configuration. Only if the server enables this capability and you actively switch it on in the game can limited gameplay events be sent. Events may include game version, level and arrow references, action type, and numeric move, push, hint-search or outcome values. A temporary random batch reference prevents duplicate writes on retry; it is not a persistent player or device identifier.

The application payload rejects names, contact details, device identifiers and arbitrary free text. Network-level technical data is still processed as explained above, so these events should not be treated as unrelatable in every circumstance. Diagnostic events expire from the service within 7 days. Switching the option off stops further uploads and clears unsent events; previously submitted events expire on their existing schedule. Refusing or withdrawing this choice does not affect levels, rewards or core play.

Gameplay records, difficulty and ranks

Game records are enabled by default. A random game ID links round time, arrow actions, errors, retries, hints, undo/preview, zoom/pan and pause counts for this game's puzzle experience and ranks. Paused and background time are excluded, and transport animation time is measured separately. Service providers process necessary numeric summaries without names, contacts, location, raw touch coordinates or coin saves.

Round and assignment records expire after 30 days; cloud profiles expire after 90 days of inactivity and are cleaned up. Delete cloud profile in settings removes existing cloud history and excludes the active round from future uploads. Later new rounds create fresh records. Failed deletion pauses uploads and can be retried, preserving local progress and coins. Cloud records are stored in Singapore; service providers may process numeric summaries in other regions over encrypted connections.

5. Contacting support

The contact button opens the email app configured on your device; it sends nothing automatically. If you email kazutokirigayakirito354@gmail.com, we receive your sender address, message and any screenshots or attachments you choose to provide, to answer questions, handle privacy requests or resolve disputes. Do not send passwords, full payment credentials or unrelated sensitive material.

The support mailbox uses Google's Gmail service, which also processes mail under its service rules. Support correspondence is kept only for handling the request, necessary follow-up and applicable legal obligations, and is not used for advertising marketing. You may request correction or deletion through the same address.

6. Providers, disclosures and international processing

Service providers host configuration, content, policy pages and any limited diagnostics that may later be enabled by choice. Gmail handles support mail you send. Apple and Google may separately process information for app distribution, system backups or services you independently use, under their own privacy policies. The game engine runs the game on the device. There is no advertising or third-party behavioral analytics. The optional companion feature uses system store billing, a private companion identity and third-party image processing as described below.

We do not sell personal information or share it for cross-app targeted advertising. Providers process relevant information for the purposes described here. Disclosures required by law or necessary to protect lawful rights are handled within applicable legal limits. SG hosting and international email services may process technical data or information you submit outside your location; applicable protections and rights still apply. New purposes or providers will be disclosed and consent requested where required before their use.

7. Retention and deletion

Local records remain until you clear them; system-backup copies must be managed separately. Optional diagnostic events have a 7-day limit. Necessary hosting access logs follow the platform's actual log-rotation settings, security/troubleshooting needs and applicable legal retention requirements. They are separate from gameplay events and are not covered by the 7-day event limit. Support mail is retained for the request, necessary follow-up, disputes and legal obligations.

There is no game account and no account sign-in needed to request deletion. Email us about identifiable information actually held by the publisher; remove device-only saves on the device. Information necessarily retained for a legal obligation or unresolved dispute has restricted purposes and is deleted or de-identified when no longer needed.

8. Your choices and rights

You can change game settings, decline diagnostics, delete local data with system tools, and contact kazutokirigayakirito354@gmail.com to request access, correction, deletion or withdrawal of consent for information we hold. Depending on applicable law, rights may also include objection, restriction, a copy or portable copy, and a complaint to a supervisory authority.

We seek only reasonable verification needed for the request. We do not force collection of a new persistent identifier to identify events that were not account-linked. We explain if information has expired, is device-only or cannot reasonably be located. Depending on applicable law, necessary service/security and support processing may rely on service delivery, your request, legitimate security interests or legal obligations. Optional diagnostics require your choice.

9. Permissions and security

This version does not request contacts, camera, microphone or precise-location access, or read an advertising ID for ads. The optional photo feature uses the system picker for the selected image rather than scanning the library. Android declares internet and network/Wi-Fi-state permissions; iOS uses system networking. Device haptics provide interaction feedback without collection of biometric data or movement trails.

We use HTTPS, limited fields and bounded diagnostic payloads to reduce unnecessary processing. Devices, email and hosting systems have their own security boundaries. Protect access to your device and backups; no system can guarantee absolute security.

10. Younger users

The game does not request a birth date or make collection of children's personal information a condition of play. Users below the local age for independent consent should use it with a guardian's consent and guidance, including management of backups and support mail. Guardians can contact support to investigate and remove information inappropriately provided by a child. Store age ratings and applicable child-protection rules still apply.

11. Updates and contact

Policy version 2026-11-08.1 takes effect on 2026-11-08. Material changes to purposes, providers or permissions will be explained on the policy page and an appropriate game entry point, with new consent where required. Updating this policy does not itself enable ads, payments, cloud saves or diagnostics. Contact Luthfi Studio: kazutokirigayakirito354@gmail.com.

Photo creation and separate permission

Photo creation is not offered in mainland China. Before selecting a photo, starting creation or purchasing, the game checks the store region for feature availability. The region is not stored or used for advertising or profiling. A store region is not precise location. If it cannot be read, new creation and purchases remain unavailable; existing content and data deletion remain accessible.

When the companion feature is available and you choose it, the system picker provides only the photo you select. On-device crop, face-count and image-quality checks assess suitability; they do not identify a person or create a face-recognition template.

Before uploading, the game explains photo processing and asks for separate permission. The selected photo, necessary creation instructions and generated reference images are sent to third-party image-processing services for suitability and safety checks, characters, walk/push animations and matching looks. Declining leaves the original game available.

Photo service providers and processing regions

Game-hosting and third-party image-processing services handle the following content only as needed for creation. We send only the selected photo, generated references and required instructions, not other library photos, contacts, gameplay records or coin saves. Hosting is in Singapore; image processing may occur in other countries or regions.

We do not use photos for advertising profiles or face login. Necessary provider caches, safety retention and deletion are subject to the providers' terms and applicable law. Deleting a photo from the game does not promise immediate removal of every independent provider cache.

Companion identity, purchases and retention

A separate random companion ID and private access credential link creation jobs, credit balance, store transactions and content reports. This identity is separate from deletable gameplay profiles. Generated content is private and does not change puzzle rules.

Source photos are removed after creation. Unfinished source photos expire 24 hours after upload and enter scheduled cleanup. Generated characters and animations remain until you delete them. Content reports are cleaned up after 30 days. Necessary transaction, credit and refund-verification records are retained separately to provide purchased rights, resolve disputes and prevent duplicate redemption.

Apple or Google processes payment. Our service receives transaction and product IDs, purchase state, the associated random companion ID and necessary purchase proof, not full payment-card details or payment passwords. The local store shows the applicable price before payment.

Deletion, reporting and recovery

You can report inappropriate generated content inside the companion feature and delete uploaded photos and generated output in its data options. Deleting the entire companion identity requires confirmation that remaining credits become inaccessible. Necessary purchase accounting remains and deletion does not automatically request a store refund. In-progress or uncertain jobs must be reconciled first.

Deleting gameplay history does not delete companion credits or content. Uninstalling, changing devices or losing the private credential may affect access. Consumables are not restored like permanent products. Keep store transaction records and contact support for access problems. Applicable statutory rights and store refund policies remain unaffected.