Privacy & your data

Updated 20 October 2026

Spooky Arrow Grudge is an independently operated, free game. Contact the developer responsible for the game and its player data at [email protected] for privacy questions, access, corrections, export or deletion requests.

What the game saves

This browser stores your player profiles, progress, coins, unlocked rewards and settings. If you connect online, the service also holds a player identifier, display name and tag, validated results, friendships, invitations and notifications. Linking an email is optional and enables account recovery and cloud saves across devices. Signed-in browsers store session credentials so you can stay connected.

Your name, player tag, leaderboard results and achievement dates can be visible to other players. Your email and session credentials are not intended to be public. Choose a name that does not reveal personal information. Do not share verification codes or use another person's email.

Why this information is used

Player information provides the game features you choose: saved progress, sign-in, rankings, friends and alerts. Technical request information and limited usage records also support security, abuse prevention and reliable operation. These purposes rely on providing the requested service and the developer's legitimate interests in operating and protecting it. Phone notifications require your browser's permission and can be switched off in game settings or your device settings.

Providers

Cloudflare delivers the website. Supabase provides authentication, database and backend processing. Resend delivers verification email. Browser and device push services deliver phone alerts. These providers may process technical information under their own terms and operate infrastructure in multiple countries. No advertising or analytics tracker was identified in the current game build. Future changes to that approach should be reflected here before launch.

Storage and retention

Essential browser storage supports progress, settings and sessions; it is not used for advertising. Browser saves remain until you remove them or clear site data. Signing out retains local progress. Server records currently remain while the service operates unless removed through an account request or applicable operational cleanup. There is not yet a general automatic inactivity-deletion schedule. Backups and provider security logs may be retained separately; ask the developer for details relevant to your request.

Your choices and rights

You can play without linking an email, change settings and request access, correction, a portable copy or deletion of your data. You may also object to relevant processing or request restrictions where applicable. Contact the address above, ideally from your linked email. The developer will verify ownership before releasing or deleting private information. Do not send passwords or verification codes. Deleting an account may remove records and friendships and cannot restore an unlinked browser profile.

Use “Export device save” in the player menu for a local backup without login credentials. This is not a complete export of all server data; contact the developer for that. Use “Remove player from this device” only when you understand the warning. Shared browsers may otherwise retain profile information.

Younger players

Do not put your real name, contact details or school in your player name. Ask a parent or guardian before linking an email or enabling phone alerts. A parent or guardian can contact the developer about a child's information. The game does not provide player chat.

If you have a concern, contact the developer first. You can also contact the UK Information Commissioner's Office. This notice will be updated as the service and its data-handling arrangements develop.