Arrow Club Privacy Policy
Effective date: June 3rd, 2026
This policy describes how Arrow Club ("we," "us," "our") handles your personal information — what we collect, why we use it, who may receive it, and the choices available to you under GDPR, CCPA/CPRA, VCDPA, and other applicable laws.
What Do These Terms Mean?
- Application
- Arrow Club, the mobile app and related services we provide
- Company
- The operator of Arrow Club that determines how personal information is processed
- Personal Information
- Information that identifies you or can reasonably be linked to you
- Usage Data
- Technical information generated automatically when you use the Application
- Device
- Any smartphone, tablet, or hardware used to access Arrow Club
- Service Provider
- A third party that processes personal information on our behalf under contract
- Account
- A profile or session associated with your use of Arrow Club
Information Collection
Automatic collection
- IP address, device model, OS version, app build
- Device identifiers (GAID, ANDROID_ID)
- Usage Data — screens viewed, session length, timestamps
- Crash logs and diagnostic reports
- Network and carrier information where available
With your consent
- Advertising identifiers (GAID, IDFA)
- Engagement and interaction metrics
- PayPal email and name — only for withdrawal processing
Why Do We Need Your Data?
- Deliver arrow gameplay, progress sync, and core features
- Manage accounts, authentication, and preferences
- Process PayPal withdrawals and conduct fraud prevention
- Send service updates, support replies, and permitted notifications
- Analyze usage, measure campaigns, and improve features
- Support compliance and business transitions
Data Disclosure
Personal information may be shared with:
- Service providers — hosting, analytics, support, payments
- Business transfers — mergers, acquisitions, asset sales
- Affiliates — entities under common control, bound by this policy
- Business partners — joint features you choose to use
- Public interactions — content you voluntarily share
- Legal obligations — valid legal process or regulatory requests
- Your consent — any purpose you explicitly authorize
PayPal protection: PayPal email and payout details are never sold or rented. They are shared only for withdrawal processing, fraud prevention, or when legally required.
How Can You Opt Out?
Android
Settings → Google → Ads → Opt out of Ads Personalization
iOS
Settings → Privacy & Security → Tracking → limit ad tracking
Email yucebaybasinyb@icloud.com with subject "Do Not Sell" to opt out of sale or sharing, or use any in-app opt-out control.
We do not perform profiling that produces legal or similarly significant effects.
Permission Details
| Permission | Purpose | Data |
|---|
INTERNET | Connectivity, ads, updates, API | Network status |
ACCESS_NETWORK_STATE | Adapt to connection quality | Network type |
ACCESS_WIFI_STATE | Stabilize Wi-Fi sessions | Wi-Fi status |
AD_ID | Ad delivery and measurement | Resettable ad ID |
VIBRATE | Haptic feedback | None |
ACCESS_ADSERVICES_TOPICS | Ad topic preferences | Topic signals |
ACCESS_ADSERVICES_ATTRIBUTION | Campaign attribution | Attribution data |
BIND_GET_INSTALL_REFERRER_SERVICE | Install source tracking | Referrer params |
BIND_APPHUB_SERVICE | Ad delivery via AppHub | Ad parameters |
ACCESS_ADSERVICES_AD_ID | Ad service API compliance | Ad service IDs |
FOREGROUND_SERVICE | Essential background tasks | None |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Secure internal messaging | None |
External Service Partners
Ads may be served through AppLovin and its mediation network.
May be shared
- Advertising IDs (resettable in settings)
- Device model, OS, screen size
- Session frequency and duration
- Ad impressions, clicks, conversions
- Country and language
Never shared
- Email or phone number
- Account credentials
- Gameplay progress tied to identity
- Precise GPS location
- PayPal payout details
Partner privacy policies
Data Processing Infrastructure
Our backend and analytics endpoint at https://usqp.arroclub.com/gidp/ supports gameplay delivery, progress synchronization, performance monitoring, anonymized usage analytics, issue detection, and customer support.
- TLS 1.2+ encryption for data in transit
- Role-based access controls and least-privilege access
- Data minimization in collection and retention
- Periodic security assessments
- Data Processing Agreements with subprocessors
Security Measures
We apply encryption in transit, access restrictions, vulnerability reviews, and contractual security obligations for partners. No transmission or storage method is completely secure; we cannot guarantee absolute security.
Minors' Data Protection
Arrow Club is not directed to users under 13. We do not knowingly collect personal information from children. Contact yucebaybasinyb@icloud.com to request deletion.
What Can You Do About Your Data?
GDPR
- Access
- Rectification
- Erasure
- Restrict processing
- Object
CCPA / CPRA
- Right to Know
- Right to Delete
- Right to Opt-Out
- Right to Non-Discrimination
VCDPA
- Access & confirm
- Correct
- Delete
- Data portability
- Opt-out of targeted ads
Submit requests to yucebaybasinyb@icloud.com. We may verify your identity before responding.
How Long We Keep It
- Personal information is retained only as long as needed for the purposes described here
- After 90 consecutive days of inactivity, personal information is deleted from active systems
- Usage Data may remain in anonymized, aggregated form for analytics
Cross-Border Transfers
Personal information may be processed outside your country. We use TLS 1.2+ encryption and contractual safeguards designed to ensure protection comparable to your home jurisdiction.
Additional Disclosure Circumstances
- Business transactions — data may transfer during mergers, acquisitions, or asset sales
- Law enforcement — we comply with valid legal process and regulatory requests
- Safety and integrity — we may disclose data to prevent fraud, abuse, or harm
Third-Party Links
Arrow Club may link to external sites we do not control. Review their privacy policies before sharing personal information.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.
Data Protection Contact
For privacy-related inquiries, including data subject requests, contact our data protection contact at yucebaybasinyb@icloud.com.
Policy Amendments
- Updates are posted here with a revised effective date
- Material changes are communicated via email or in-app notice before taking effect where required
- Continued use constitutes acceptance of updates