Privacy Policy
How Shape Arrows handles player data. Written in plain language — if anything stays unclear, ask and we will answer.
In short. The game creates no accounts, never asks for your name, email or phone number, and does not send your progress to our servers — we do not run any. Everything you have solved stays on your device. Data leaves the device in two cases only: when you make a purchase (handled by Apple) and when you tap “Watch a video” yourself (handled by the ad network). Both are avoidable, and the game plays the same either way.
1. Who processes the data
The developer and data controller is Artem Beletskiy, an independent developer publishing on the App Store under that name. The only official address for support and data questions is hello@rebusarium.com.
2. What this policy covers
It covers the iPhone application “Shape Arrows: Tap Away Puzzle” and this website,
arrows.rebusarium.com. The browser edition of the game is described
separately in section 14. The policy does not cover third-party
services such as the App Store or the ad network — they have their own rules, linked below.
3. What data is processed and where it goes
| What | Where it is processed |
|---|---|
| Game progress: cleared levels, stars, coins, purchased cosmetics, boosters, daily streak, sound and vibration settings | On your device only, in the app's own system storage (UserDefaults). It is never transmitted and is not accessible to the developer. |
| In-app purchase: the fact of the purchase and its product identifier | Apple (App Store / StoreKit). The developer receives confirmation that a purchase happened; card numbers, cardholder names and other payment details never reach the developer in any form. |
| Rewarded video — only when you request one: the device advertising identifier (IDFA), IP address, device model, OS version, language and technical request data | Yandex Advertising Network (Yandex Mobile Ads SDK). The IDFA is shared only if you granted permission in the iOS tracking prompt. Without permission the ads stay non-personalised. |
| Crash reports and App Store statistics | Apple. The developer sees only aggregated, anonymised reports, and only if you chose to share them in iOS settings. They cannot be traced back to a person. |
| Support email: the sender's address and whatever you write yourself | The mailbox hello@rebusarium.com. Used only to reply, kept for no
longer than a year, never shared. |
4. What we never collect
The app does not request or receive your name, email address, phone number, date of birth, location, contacts, photos, or access to the camera, microphone, calendar, health data or any files on the device. There is no sign-up, no account, no chat, no social buttons and no third-party analytics. We do not sell data and do not share it with data brokers — because we do not collect it.
5. Purposes and legal bases
- Running the game (keeping progress on the device) — performance of a contract: without saving, the game could not resume where you left off. The data never leaves the device.
- Purchases (processing and restoring them) — performance of a contract.
- Advertising you asked for — your consent: a video plays only after you tap the corresponding button, and personalisation requires the separate tracking permission.
- Answering a support request — legitimate interest: replying to the person who wrote to us.
The legal bases are expressed in the terms of Article 6 GDPR; other jurisdictions provide equivalent grounds.
6. Advertising and tracking
There is no forced advertising. A video never interrupts a level and never stands between you and your next move: it appears only when you tap “Double the coins with an ad” or “Continue with an ad”. Declining breaks nothing — the level stays available, the reward is simply not doubled.
Ads are served by the Yandex Advertising Network. When one is shown, iOS may ask for your permission to track (App Tracking Transparency). Whatever you answer, the game works the same; if you decline, the advertising is non-personalised.
You can withdraw the permission at any time in Settings → Privacy & Security → Tracking. Apple's own advertising personalisation is controlled in Settings → Privacy & Security → Apple Advertising.
Buying the full version removes the advertising offers from the game entirely.
7. In-app purchases
All purchases go through the App Store and follow Apple's rules. The developer receives only the confirmation that a purchase took place — enough to credit the coins or unlock the full version. Earlier purchases can be restored in the in-game shop with “Restore purchases”, signed in with the same Apple ID. Refunds are handled by Apple at reportaproblem.apple.com.
8. Children
The game suits any age and is rated 4+ on the App Store. It collects no personal data — from adults or children — does not ask for an age, builds no profiles and contains no links to social networks. The app is not directed specifically at children under 13 and does not knowingly collect information from them; if you believe that has happened anyway, write to us and we will sort it out.
Personalised advertising requires the tracking permission, and iOS does not grant that permission for child accounts.
9. How long data is kept, and how to delete it
Progress stays on the device for as long as the app is installed. There is no server-side copy: we cannot look at your progress, restore it, or delete it for you.
To erase all game data, delete the app. Two iOS behaviours are worth knowing, neither of them ours: part of an app's data may linger in system storage for a while and return on reinstall, and if iCloud Backup is on, app data may be included in your backup — that backup belongs to you and is managed in iCloud settings.
Support correspondence is kept for no longer than a year after the last message.
10. Your rights
If the GDPR, UK GDPR, CCPA/CPRA or a comparable law applies to you, you have the right to request access to your data, its correction, deletion, restriction or portability, to object to processing and to withdraw consent. Tracking consent can be withdrawn by you directly in iOS settings (see section 6).
In practice: since we hold none of your data and cannot link any of it to a person, such a request usually comes down to deleting the app. If you need a formal answer, write to hello@rebusarium.com and we will reply within 30 days. If our answer does not satisfy you, you may lodge a complaint with the data protection authority in your country.
11. Third-party services
- Apple Inc. — app distribution, purchases, crash reports: apple.com/legal/privacy.
- Yandex Advertising Network — rewarded videos you request: yandex.com/legal/confidential.
These companies act as independent controllers and may transfer data outside your country of residence, to servers in other jurisdictions. The terms of such transfers are set out in their own policies.
12. This website
arrows.rebusarium.com is a set of static pages. It uses no cookies, no
analytics, no tracking pixels and no external fonts, and the web server keeps no access log.
The only thing you can send us from here is an email, by tapping the address.
13. The browser version
The game also exists as a browser edition published on the Yandex Games platform. That is a separate product with a different feature set: when you play it while signed in to the platform, progress and scores may be stored in your Yandex account, and the leaderboard shows the name you chose there. That processing is governed by the Yandex Games rules and Yandex's privacy policy. The iPhone app has no access to that data and no connection to it.
14. Security
Data that stays on the device is protected by iOS itself: the app sandbox and device encryption. Connections to the ad network and the App Store use HTTPS. This site is served over HTTPS with a Let's Encrypt certificate.
15. Changes to this policy
If the game gains features that change how data is handled, we will update this page before that version ships and change the effective date at the top. Significant changes will also be noted in the App Store release notes.
16. Contact
For any question about data, and for support in general: hello@rebusarium.com. We answer in English and Russian, usually within two business days.