Arco Studio
Privacy Policy – Stack Pop
- You can play Stack Pop without creating an account. We never ask for your name, phone number, contacts, photos or precise location.
- The game is free and has no ads. It doesn't use your device's advertising ID. You can buy optional items through Google Play.
- We use analytics and crash reports to fix bugs and balance levels, and a server to check that purchases are real.
- We don't sell or share your personal data. You can ask us to access or delete your data by writing to jp@arco.games.
1. Who we are
This policy explains how Arco Studio ("we", "us", "our") handles information when you play Stack Pop (the "Game") on Android. Arco Studio is the controller of the personal data described here.
If you have any question about privacy, write to jp@arco.games.
Using the Game means you have read this policy. If you don't agree with it, please stop using the Game and uninstall it.
2. Information we collect
2.1 Information you give us
- Support messages. If you email us, we receive your email address and whatever you choose to write.
2.2 Information collected automatically
- Device information: device model, operating system and version, language, time zone, screen size and app version.
- Identifiers: app instance and installation IDs created by our analytics providers, a random installation ID created by the Game, and a random anonymous account ID that Firebase Authentication creates when you buy something, so our server can check the purchase. The Game doesn't read your device's advertising ID.
- Gameplay and usage: levels started and completed, moves, boosters used, lives, session length and settings.
- Purchases: if you buy something in the Game, we receive a record of the purchase (product, price, currency, date, order ID and the purchase token Google Play gives the Game). Our server sends the purchase token to Google Play to confirm the purchase is real before the Game delivers it, and keeps a record of each verified purchase (product, contents, dates and a coded form of the purchase token), tied to the anonymous account ID and the installation ID, so the same purchase is never delivered twice and refunds can be handled. Payments are processed by Google Play. We never receive your card number or other payment details.
- App integrity: when the Game talks to our server, Firebase App Check uses Google Play Integrity to confirm the request comes from a genuine copy of the Game on a genuine device.
- Diagnostics: crash logs and performance data.
- Approximate location: country or region inferred from your IP address. We don't collect precise (GPS) location.
- Push notification token: if you allow notifications, a token that lets us send reminders and game news to your device.
Your game progress, coins, boosters and settings are stored on your device. Uninstalling the Game deletes them.
3. How we use information
- To run the Game: save your progress, verify and deliver purchases and rewards, and send notifications you agreed to receive.
- To fix and improve it: find and fix crashes, understand which levels are too easy or too hard, and adjust game settings remotely.
- To measure our marketing: learn which of our campaigns brought players to the Game.
- To support you: answer your messages and solve problems you report.
- To keep the Game safe and lawful: prevent fraud and abuse, and meet our legal obligations.
4. No advertising
This version of the Game doesn't show ads, doesn't include advertising software and doesn't use your device's advertising ID. If we add ads in a future version, we will update this policy before that version is released and, where the law requires it, ask for your consent.
5. Third-party services
We share information with the service providers below only for the purposes described in this policy. They process it on our behalf, under their own privacy policies.
| Provider | What it does | Privacy policy |
|---|---|---|
| Google Firebase (Analytics, Crashlytics, Remote Config, Cloud Messaging, Authentication, App Check, Cloud Functions, Firestore) | Analytics, crash reports, remote settings, push notifications, and the server that verifies purchases | firebase.google.com |
| Google Play | Downloads, in-app purchases and purchase verification | policies.google.com |
6. Your choices
- Notifications: turn them off in the Game's settings or in your device settings.
- Analytics: you can reset the identifiers analytics use by clearing the Game's data in your device settings. This also erases your progress.
- Stop all collection: uninstall the Game.
7. Children
The Game is made for a general audience and is not directed to children under 13 (or the minimum age required in your country). We don't knowingly collect personal data from children. If you are a parent or guardian and believe your child has given us personal data, email jp@arco.games and we will delete it.
8. Sharing, transfers and retention
8.1 Who we share data with
- Service providers listed in section 5, for the purposes described there.
- Authorities, when the law requires it or to protect our rights, our players or the public.
- A buyer or successor, if Arco Studio is involved in a merger, acquisition or sale of assets. They will remain bound by this policy.
We don't sell your personal data, and we don't share it with others for targeted advertising.
8.2 International transfers
Our providers may process data in the United States, the European Union and other countries, which may have different data protection laws from yours. When we transfer data out of the EEA, the UK, Switzerland or Brazil, we rely on safeguards the law recognizes, such as the European Commission's standard contractual clauses or adequacy decisions.
8.3 How long we keep data
- Analytics and crash data are kept for the periods set in each provider's settings and then deleted or aggregated, so they no longer identify you.
- Support emails are kept while we help you and for up to two years afterwards, in case the same problem comes back.
- Purchase records are kept as long as tax and accounting laws require.
9. Your rights
Depending on where you live, you may have the rights below. To use them, email jp@arco.games. We may need to confirm the request comes from you. We answer within the period the law sets, usually 30 days, and we don't charge for it.
9.1 EEA, United Kingdom and Switzerland (GDPR)
You can access, correct, delete or receive a copy of your data, restrict or object to how we use it, and withdraw your consent at any time. You can also complain to your local data protection authority.
Our legal bases are: performing our contract with you (running the Game and delivering purchases), our legitimate interests (analytics, crash reports, security and fraud prevention, balanced against your rights), your consent (notifications), and our legal obligations.
9.2 Brazil (LGPD)
You can confirm whether we process your data, access it, correct it, anonymize, block or delete it, receive it in a portable format, learn who we share it with, revoke your consent, and ask for a review of automated decisions. You can also file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).
9.3 United States
If you live in California or another state with a consumer privacy law, you can ask to know, access, correct and delete your personal data. We don't sell your data or use it for targeted advertising. We won't treat you differently for using these rights.
10. Security
We and our providers use reasonable technical and organizational measures, such as encrypted connections, to protect your data. No system is completely secure, so we can't guarantee absolute security.
11. Links to other sites
Links in the Game may take you to websites or apps we don't control. Their own privacy policies apply there.
12. Changes to this policy
We may update this policy when the Game or the law changes. We will post the new version on this page with a new "Last updated" date. If a change is significant, we will also let you know in the Game and, where the law requires it, ask for your consent again.
13. Contact us
Arco Studio
Email: jp@arco.games