PRIVACY POLICY
(Last Updated: August 7, 2026)
Please read this Privacy Policy carefully. It describes how Cratoro ("we", "us", "our", "Cratoro"), a game developer based in India, collects, uses, stores, and shares your personal information when you download, install, or play ArrowBliss on Android devices.
This Privacy Policy applies to all users of ArrowBliss worldwide. By installing or using ArrowBliss, you confirm that you have read this Privacy Policy and agree to the practices described herein. This Privacy Policy should be read together with our Terms of Service, available at https://www.cratoro.com/terms.
If you do not agree with any part of this Privacy Policy, please do not install or continue using ArrowBliss.
1. WHO WE ARE
Cratoro is the developer and publisher of ArrowBliss. We are based in India and operate under applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023.
For any privacy-related questions, data requests, or concerns, you can contact us at:
Email: support@cratoro.com Website: https://cratoro.com
2. TWO MODES: WHAT THIS MEANS FOR YOUR DATA
ArrowBliss is designed with privacy in mind and operates in two distinct modes, each with a fundamentally different data profile.
Guest Mode (playing without an account)
If you play ArrowBliss without signing in with a Google account, we operate as a strictly offline, local-only application. In this mode, all game data — your level progress, streak, settings, daily challenge cache, and play history — is stored exclusively on your device using Hive, a local encrypted database library. Nothing is transmitted to our servers or any external cloud service on your behalf. No account is created, and no personal information is collected by us. If you uninstall ArrowBliss, all locally stored data is permanently removed from your device.
Signed-In Mode (playing with a Google account)
If you choose to sign in with your Google Account, a limited subset of your gameplay progress is synchronised to Firebase Cloud Firestore (operated by Google LLC) so that your progress is preserved and accessible across multiple devices. Signing in is entirely optional. The full game experience — all levels, daily challenges, and streaks — is available in Guest Mode without any account or data sharing.
3. INFORMATION WE COLLECT AND HOW
The personal information we collect depends on how you use ArrowBliss.
Information stored locally on your device (all users)
The following data is stored only on your device using Hive local storage and is never uploaded to any server unless you explicitly sign in. This data does not leave your device:
- Sound enabled or disabled preference
- Haptics (vibration) enabled or disabled preference
- Whether you have purchased Remove Ads
- Total number of hints used across all sessions
- Whether you have completed the onboarding tutorial
- Per-level data: level identifier, completion status, timestamp of completion, hints used per level, undo count per level
- Daily challenge streak: current streak count, longest streak achieved, date of last completed daily challenge
- Daily challenge cache: the date, the puzzle level data (stored as JSON), and whether you completed it that day
- Your in-game display name, avatar selection, guest status, and a list of dates on which you played the game
Information synced to the cloud (signed-in users only)
When you sign in with Google and cloud synchronisation is active, the following fields are written to Firebase Cloud Firestore under your unique Firebase User ID:
- Total hints used across all sessions
- Your current streak count
- Your all-time longest streak
- The date of your last completed daily challenge
- Per-level completion timestamps (the date and time each level was completed)
- A timestamp recording the most recent synchronisation event
Only the minimum data necessary to restore your game progress on a new device is synchronised to the cloud. Settings such as sound and haptics preferences, individual level hint and undo counts, daily challenge puzzle data, and your play date history remain on your device only and are never uploaded.
Information received from Google Sign-In (signed-in users only)
When you choose to sign in with your Google Account, Google provides us with the following information as part of the standard OAuth 2.0 authentication process:
- Your Google User ID, which we use as the unique key for your Firestore document
- Your display name, which is shown in your in-game profile
- A URL pointing to your Google profile photo, which is displayed as your in-game avatar. We fetch the image from Google's servers when displaying your profile; we do not copy, store, or host the image ourselves
- Your email address, which is held securely by Firebase Authentication for account management purposes and is not displayed to any other users
We do not access your Google contacts, Google Drive files, Gmail messages, or any other Google service beyond the above.
Information collected automatically by third-party SDKs
The following information is collected automatically by third-party software development kits integrated into ArrowBliss, regardless of whether you are in Guest Mode or Signed-In Mode:
Firebase Crashlytics (Google LLC): When ArrowBliss encounters a crash or significant error, Crashlytics automatically captures a crash report containing the stack trace, the state of the app at the time of the crash, your device model, your Android OS version, and your app version. This information is used exclusively to identify and fix bugs. Crashlytics also assigns an anonymous installation UUID to your device for the purpose of deduplicating crash reports; this identifier is not linked to your Google account.
Firebase Analytics (Google LLC): Firebase Analytics automatically collects a set of standard events when you use ArrowBliss, including app open, session start, session end, first open, OS update, and app update. It also collects your device type, OS version, app version, and your approximate country (derived from your IP address — not from GPS). We do not log any custom analytics events in ArrowBliss beyond these Firebase defaults.
Google AdMob (Google LLC): ArrowBliss displays rewarded advertisements only — you explicitly choose when to watch an ad in exchange for an in-game hint. When ads are served, AdMob uses your Google Advertising ID (GAID), an anonymous and resettable device identifier, to serve and measure the ads. AdMob also collects metadata such as your device type, OS version, app identifier, ad unit identifier, the time of the ad request, and whether you watched the ad to completion. If you have purchased Remove Ads, ad serving is permanently disabled for your account and AdMob is not invoked.
Information we do not collect
We do not collect your precise GPS location, your device contacts, your call history, your SMS messages, your camera or microphone input, your payment card numbers, your banking details, your browsing history outside ArrowBliss, or any biometric data of any kind.
4. HOW WE USE YOUR INFORMATION
We use the information described in this Privacy Policy for the following purposes:
To operate and deliver ArrowBliss: We use your locally stored data to run the game, save your puzzle progress, maintain your streak, cache the daily challenge, and preserve your preferences between sessions.
To sync your progress across devices: For signed-in users, we use your Firestore data to restore your progress when you reinstall the app or switch to a new device.
To diagnose and fix crashes: We use crash reports from Firebase Crashlytics to identify and resolve technical issues that affect the stability of ArrowBliss.
To understand how the game is used: We use Firebase Analytics event data to understand how players interact with ArrowBliss in aggregate, allowing us to improve gameplay, fix underperforming features, and make better design decisions.
To serve rewarded advertisements: We use your Google Advertising ID through AdMob to serve you rewarded ads when you choose to watch them. This supports the continued availability of ArrowBliss as a free game.
To deliver your in-app purchase: We use your Google Play purchase receipt to verify and activate the Remove Ads feature on your account.
To respond to support enquiries: When you contact us at support@cratoro.com, we use the information you share with us in your email — including any account details or error descriptions you provide — to investigate and resolve your issue.
To meet our legal obligations: We may process your data as required to comply with applicable law, including the Information Technology Act, 2000 (India) and the Digital Personal Data Protection Act, 2023.
We do not use your personal data for behavioural profiling, targeted advertising beyond AdMob rewarded ads, or any purpose not listed above, and we do not sell your personal data to any third party.
5. THIRD-PARTY SERVICES
ArrowBliss integrates the following third-party services, all operated by Google LLC. Each service processes data as described in this policy and is governed by its own privacy practices:
| Service | Purpose | Privacy Policy | |---|---|---| | Firebase Authentication | Google Sign-In; manages your account credentials | policies.google.com/privacy | | Cloud Firestore | Stores your cloud-synced game progress | policies.google.com/privacy | | Firebase Analytics | Automatic app usage analytics | policies.google.com/privacy | | Firebase Crashlytics | Crash reporting and diagnostics | policies.google.com/privacy | | Google AdMob | Serves and measures rewarded ads | policies.google.com/technologies/ads | | Google Play Billing | Processes the Remove Ads in-app purchase | play.google.com/about/play-terms |
We have no control over the data practices of Google LLC beyond the contractual agreements we have entered into as a Firebase and AdMob customer.
6. HOW WE SHARE YOUR INFORMATION
We do not sell, rent, or trade your personal information to any third party.
We share your data only in the following circumstances:
With Google LLC as our data processor: As described in Section 5, we share data with Google LLC solely for the purpose of operating Firebase, AdMob, and Google Play Billing on our behalf. Google processes this data in accordance with its privacy policy and the data processing terms applicable to Firebase and AdMob.
To comply with legal obligations: We may disclose your personal data if required to do so by a court order, government request, or applicable law, including under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
In the event of a business transaction: If Cratoro is involved in a merger, acquisition, restructuring, or sale of substantially all of its assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer by updating this Privacy Policy, and the successor will be required to honour the same privacy commitments described here.
With your explicit consent: We will not share your personal data with any other third party without first informing you clearly and obtaining your explicit consent.
7. INTERNATIONAL DATA TRANSFERS
Your locally stored data (Hive) remains exclusively on your device at all times and is never transferred internationally.
For signed-in users, your Firebase Authentication credentials and Firestore game data are processed and stored on Google LLC's servers, which may be located in the United States or other countries outside India. By choosing to sign in with Google and enabling cloud sync, you consent to this international transfer of your personal data to Google's infrastructure.
Google LLC maintains the safeguards required under applicable data protection law for international transfers, including standard contractual clauses approved by relevant data protection authorities.
8. DATA RETENTION
We retain your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy or as required by law.
Your locally stored game data (Hive) is retained on your device until you uninstall ArrowBliss or manually clear the app's data through your Android settings. Your Firestore cloud data is retained until you delete your account, after which it is permanently erased within 24 hours. Firebase Analytics data is retained for 14 months by Google, after which it is automatically deleted in accordance with Google's standard data retention policy. Crash reports collected by Firebase Crashlytics are retained by Google for 90 days. If you contact us by email, we may retain your correspondence for up to three years or as required by applicable law to handle follow-up enquiries.
9. YOUR RIGHTS AND OPTIONS
Depending on your country of residence and applicable law, you may have the following rights with respect to your personal data:
Right to access: You may request a copy of the personal data we hold about you.
Right to correction: You may request that we correct any inaccurate or incomplete personal data.
Right to erasure: You may request that we permanently delete your personal data. For account deletion, see Section 10 below.
Right to restriction: You may request that we temporarily restrict our processing of your data in certain circumstances, for example if you contest its accuracy.
Right to data portability: You may request a copy of your cloud-synced data in a structured, machine-readable format.
Right to object: You may object to our processing of your data where we rely on legitimate interest as our legal basis.
Right to opt out of personalised advertising: You can opt out of personalised ads at any time by going to Android Settings → Google → Ads → "Delete advertising ID." This resets your advertising identifier and removes the link between your device and any previous ad targeting data.
To exercise any of the above rights, please contact us at support@cratoro.com with the subject line "Privacy Request." We will respond within 30 days. We may ask you to verify your identity before fulfilling your request. Please note that exercising certain rights may affect our ability to provide certain features of ArrowBliss.
10. ACCOUNT AND DATA DELETION
You can permanently delete your ArrowBliss account and all associated cloud data directly from within the app. To do so, open ArrowBliss, go to Settings, scroll to the bottom, and tap "Delete Account". You will be asked to confirm. Once confirmed, we immediately and permanently delete your Firestore document and all the data it contains, sign you out of Firebase Authentication, and delete your Firebase Auth user record.
This action is irreversible. All game progress, streak data, and profile information will be permanently lost and cannot be recovered under any circumstances.
If you are unable to delete your account from within the app, you may email us at support@cratoro.com with the subject line "Account Deletion Request," including the Google email address associated with your ArrowBliss account. We will process your request within 30 days.
If you are using ArrowBliss as a guest, there is no cloud account to delete. Simply uninstalling the app from your device removes all locally stored data permanently.
11. CHILDREN'S PRIVACY
ArrowBliss is a general-audience puzzle game and is not directed at or intended for children under the age of 13. In the European Union and United Kingdom, the minimum age is 16. We do not knowingly collect personal information from children below the applicable minimum age.
If you are a parent or legal guardian and believe your child has used ArrowBliss and provided personal data — particularly by signing in with a Google account — please contact us immediately at support@cratoro.com with the subject "Child Data Deletion — Parental Request." Please include your child's display name or any in-game identifier you are aware of, your relationship to the child, and your contact information. We will investigate promptly and delete any such data without delay.
12. SECURITY
We take the security of your personal data seriously and implement the following measures to protect it:
All data transmitted between ArrowBliss and Firebase servers is encrypted using Transport Layer Security (TLS/HTTPS). Your Firestore data is protected by Firebase Security Rules that ensure only your authenticated Firebase account can read or write your game data. We do not store your password — authentication is handled entirely by Google's OAuth 2.0 infrastructure, which means your Google credentials never pass through our systems. We follow the principle of data minimisation, collecting and storing only what is strictly necessary for the features described in this Privacy Policy.
Despite these measures, no system or transmission of data over the internet can be guaranteed to be completely secure. If you become aware of any security vulnerability or unauthorised access to your account, please notify us immediately at support@cratoro.com.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our data practices, new features added to ArrowBliss, changes in applicable law, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and display an in-app notification upon your next launch of ArrowBliss. Your continued use of ArrowBliss after any updated Privacy Policy becomes effective constitutes your acceptance of the changes. We encourage you to review this page periodically.
14. GOVERNING LAW
This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Delhi, India.
15. CONTACT US
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact us:
Cratoro Email: support@cratoro.com Website: https://www.cratoro.com/