Privacy policy
4D Arrow, by FRACTALON LIMITED. Last updated 31 October 2026.
This policy explains what the 4D Arrow game (the Android app, the iPhone and iPad app, and the web version at arrow.fractalon.net) collects, why, who else receives it, and how to have it deleted. FRACTALON LIMITED is the data controller. Contact us at support@fractalon.net.
You can play without an account
The whole game works without signing in. Your progress, stars and settings are kept on your device. An account is only needed for a place on the public ranking table and to keep your game on our server.
What we collect
| Data | When | Why |
|---|---|---|
| Email address and password | If you create an account with email. The password is stored only as a secure hash by our sign-in service. | To sign you in, confirm your address and reset your password. |
| Name and email from Google | If you sign in with Google. | To sign you in. |
| Name and email from Apple | If you sign in with Apple. If you choose Hide My Email, we receive a private relay address from Apple instead of your own. | To sign you in. |
| Your chosen player name, stars and furthest level | If you are signed in. | To show your place on the public ranking table. Your player name is visible to everyone. |
| Your saved game | If you are signed in. | So you can carry on from another device or after reinstalling. |
| Reports about player names | If you report a name on the ranking table. | To remove offensive names. We keep which name was reported and either your account ID or a one-way hash of your IP address, so one person counts once. |
| Anonymous play counts | When a level or tool is opened. | To see which parts of the game are played. Only the pack or tool name and the day are sent: no account, device ID or level number. |
| IP address | Whenever the game talks to our servers. | To answer the request and to limit abuse (rate limits). |
Purchases
In-app purchases in the Android app are made through Google Play. Google processes your payment details; we never see them. The app receives a purchase token and the product you bought, keeps them on your device, and uses them so each purchase is delivered exactly once. See Google's privacy policy.
In the iPhone and iPad app, purchases are made through the App Store. Apple processes your payment details; we never see them. The app receives a transaction ID and the product you bought, and uses them in the same way. See Apple's privacy policy.
Advertising
The Android, iPhone and iPad apps show ads from Google AdMob. AdMob may collect and use your device's advertising ID, IP address, approximate location and information about your interaction with ads, to show and measure ads and prevent fraud. In the UK, EEA and Switzerland you are asked for consent before personalised ads are shown, and you can change your choice at any time from How to play → Ad privacy choices in the app. You can also reset or delete your advertising ID in your Android settings. On an iPhone or iPad, the app asks your permission before your device's advertising ID can be used to track you across other companies' apps and websites; if you say no, ads are still shown but are not personalised using it, and you can change this at any time in Settings → Privacy & Security → Tracking. Buying Remove ads stops ads before levels; ads you choose to watch for a hint remain available. See how Google uses information from apps that use its services. The web version shows no ads.
Who else receives your data
- Google, for Google sign-in, Google Play purchases and AdMob ads, as described above.
- Apple, for Sign in with Apple and App Store purchases, as described above.
- Our hosting provider, which runs our servers in the United Kingdom.
We do not sell your personal data.
How long we keep it
Account, ranking and save data are kept until you delete your account. Nightly backups are kept for 30 days, so deleted data leaves our backups within 30 days. Name reports are deleted with the account they concern.
Security
All traffic between the game and our servers is encrypted (HTTPS). Passwords are never stored in readable form.
Deleting your account and data
You can delete your account from inside the game, or ask us to. See how to delete your account. Uninstalling the app removes the data kept on your device.
Your rights
Under UK and EU data protection law you can ask for a copy of your data, have it corrected or deleted, object to or restrict its use, and complain to a data protection authority (in the UK, the ICO). Email us to use any of these rights.
Children
4D Arrow is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
Changes
If this policy changes, we will update this page and the date at the top.