Arrow Zip

Privacy Policy

Last updated: October 23, 2026

This policy explains how Arrow Zip: Tap Away Puzzle ("the game"), made by HDC Studio ("we", "us"), handles information. In short: your game is saved on your phone, and a copy is kept on our own small server under a random player ID so you can continue on another phone. If you open the leaderboard, the number of levels you have cleared is shown there under a made-up name. The coin shop needs prices and purchase records. There are no accounts, no names or emails, no analytics and no advertising.

1. Information stored on your device

To keep your game going, the game saves data such as your level progress, coins, boosters, the pictures in your album, your win streak, daily challenge progress, settings (sound, vibration, language) and a list of your recent purchases with their order numbers on your device. We cannot see or access it.

2. Cloud save on our server

When your device is online, the game keeps a copy of your progress on our server (HDC Backend, run by us on Cloudflare), so that reinstalling the game or moving to a new phone keeps your levels, coins, album and purchases. The first time the game goes online (automatically, when it starts), our server issues a random player ID and a random key for this installation; there is no sign-in and no name, email or phone number. The copy contains your level progress, coins, boosters, album pictures and paid album pages, win streak, the last daily challenge you finished, a one-time flag (whether the "blocked arrow" tip was shown), any coins our support team added for you, and the record of purchases already delivered (product, date, order number and the purchase-validation transaction ID, so that a purchase is never delivered twice). The game also tells our server the random purchase ID of section 4, so that the purchase events RevenueCat forwards (section 6) belong to your player ID and are deleted with it. Sound, vibration and language settings stay on each phone.

Moving to another phone: Settings › Move to another device shows an 8-character code that works once, for 15 minutes. Typing it on the new phone links that phone to the same player ID. Never give the code to anyone else: whoever enters it gets your progress.

You can turn this off and delete the copy at any time in Settings › Delete cloud data (see section 7).

3. Leaderboard

The Home screen has a Ranking button. Only after you have opened it once, the game sends our server the number of levels you have cleared (a number from 1 to 300). Other players see it next to a made-up name that the server picks for you, such as "Sunny Otter 482" - players cannot choose or type a name, and nothing else about you is shown. You can hide yourself at any time with Hide me from the leaderboard on the same screen: your entry is removed from the leaderboard and the game stops sending your score (Show me on the leaderboard brings it back).

4. In-app purchases

You can buy coin packs with real money. Payments are handled by Google Play; we never see your card or payment details. To check that each purchase is genuine and to deliver what you paid for, the game uses RevenueCat, a purchase-validation service that acts on our behalf. Each time the game starts (when your device is online), it contacts Google Play and RevenueCat to load the prices and to deliver any purchase that was paid but not yet delivered; when you buy, it contacts them again. RevenueCat receives:

We have switched off RevenueCat's collection of advertising and device identifiers. This data is used only to validate and deliver purchases, to answer your support requests and for our own sales bookkeeping. It is never sold and never used for advertising.

5. Permissions

6. Third-party services

The game contains no analytics, advertising or tracking services. Google Play's billing library may send Google diagnostic data about the payment flow, as described in Google's policy.

7. Keeping and deleting your data

Data on your device stays until you uninstall the game or clear its storage. The copy on our server (sections 2, 3 and 6) stays until you delete it: in the game, open Settings › Delete cloud data, which removes your saved copy, your leaderboard entry, transfer codes, coins added by support and the purchase events linked to your player ID, on every device at once, and turns cloud save off. A purchase made while cloud save was off is stored on our server without a player ID (it is attached to your new player ID, and deleted with it, if you turn cloud save back on); you can also email us its order number (it starts with "GPA.") and we delete it within 30 days. If you no longer have the game, the copy cannot be matched to you - it is linked to no name or contact detail - unless you can tell us your leaderboard name or an order number; email us and we will tell you what we could find and delete it within 30 days. Purchase records are also kept by Google Play and RevenueCat for as long as needed for bookkeeping, refunds and legal obligations; we delete RevenueCat's records of your purchases on request too. Step-by-step instructions: Delete your data.

8. Children

The game is suitable for all ages and never asks anyone, of any age, for a name, email, age or other contact details. The data described above (a random player ID, the game copy, an optional leaderboard score under a made-up name, purchase records and the technical data of each request, including the IP address) is processed for every player, children included, only to run cloud save, the leaderboard and purchases and to answer support requests - never for advertising, tracking or profiling. A child appears on the leaderboard only after opening it, under a made-up name, and can hide again at any time; a parent can delete everything from Settings or ask us (section 7). Purchases are made through Google Play, where parents can require approval for every purchase in Google Play's family settings.

9. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, delete or export personal data about you, and to object to its processing. Contact us and we will answer within 30 days. You can also complain to your local data protection authority.

10. Changes to this policy

If a future version changes what is processed — for example by adding advertising — we will update this policy before that version is released. The date at the top shows the latest version.

11. Contact

HDC Studio — dev.hdcstudio@gmail.com