Effective date: September 25, 2026
This Privacy Policy explains how Arco App Studio, L.L.C. ("Arco App Studio," "we," "us," or "our") collects, uses, shares, retains, and deletes information in the Android game Shaft & Spoils, package name com.andrew.shaftandspoils.
ACCOUNT AND DATA DELETION REQUESTS
You may permanently delete your Shaft & Spoils account and associated game data inside the app by opening THE LOCKER, opening the Premium panel, and selecting DELETE ACCOUNT & DATA. You will be asked to confirm the request and re-enter your account password.
If you cannot access the app, email arcoappstudio@gmail.com from the email address associated with the account. Use the subject line "Shaft & Spoils Account Deletion Request" and include the account email address. Do not send your password. We may request reasonable verification to protect the account from unauthorized deletion.
A verified deletion request removes the Firebase account and the cloud player record controlled by Arco App Studio, including saved progress, virtual-currency balances, gear parts, upgrades, owned or equipped items, and account-linked game settings. We normally complete verified requests within 30 days. Local data on a device can be removed by clearing the app's storage or uninstalling the app.
Limited purchase, refund, fraud-prevention, security, tax, accounting, and legal-compliance records may be retained for up to seven years, or longer when required by law. Google Play, RevenueCat, advertising providers, device manufacturers, and other independent providers may retain records under their own policies. Account deletion does not reverse completed purchases or remove transaction records maintained by Google Play.
INFORMATION WE COLLECT
Account information. If you create or link an account, we process your email address, Firebase user ID, authentication status, and security tokens. Authentication is provided through Google Firebase Authentication. Arco App Studio does not receive or store your plaintext password.
Gameplay and cloud-save information. We process game progress and player-state information such as virtual diamonds, gear parts, upgrades, deepest depth reached, run results, owned or equipped cosmetic items, Premium entitlement status, and related timestamps or operation identifiers. Some preferences may also remain stored locally on your device.
Purchase information. When you make or restore a purchase, Google Play Billing and RevenueCat may process product identifiers, purchase and transaction identifiers, entitlement status, purchase or refund events, store environment, and associated account identifiers. Google Play processes payment-card or other payment-method details; Arco App Studio does not receive full payment credentials.
Advertising, device, and usage information. Shaft & Spoils uses Unity LevelPlay and Unity Ads to provide banner and interstitial advertisements to eligible non-Premium users. Advertising providers may process an advertising identifier or other device identifiers, IP address, approximate location derived from an IP address, app interactions, ad impressions and clicks, device and operating-system information, and diagnostic information. The app offers advertising privacy choices before the advertising SDK initializes. Depending on the user's selection and applicable law, ads may be personalized, non-personalized, or treated as child-directed.
Diagnostics and security information. Our service providers may process app version, device type, operating-system information, network information, request timestamps, authentication results, error details, and security or anti-fraud signals needed to operate and protect the service.
We do not request precise location, contacts, messages, photos, videos, audio files, calendar data, health information, or payment-card numbers through Shaft & Spoils.
HOW WE USE INFORMATION
We use information to create and authenticate accounts; save and restore progress; synchronize player state; deliver purchases and entitlements; prevent duplicate or fraudulent grants; process refunds and reversals; serve and measure advertisements; understand app interactions and performance; diagnose problems; provide support; enforce our terms; and meet legal, security, accounting, and platform requirements.
HOW INFORMATION IS SHARED
We do not sell or rent personal information. Information may be processed by service providers that help operate Shaft & Spoils, including:
• Google Play and Google Play Billing for distribution, purchases, refunds, licensing, and platform services;
• Google Firebase Authentication and Google Cloud Firestore for account authentication and cloud player data;
• BuildShip for authenticated backend workflows;
• RevenueCat for purchase validation, entitlement management, and purchase-event processing;
• Unity LevelPlay, Unity Ads, and eligible mediated advertising partners for advertising, ad measurement, fraud prevention, and diagnostics; and
• Android, device manufacturers, and infrastructure providers for operating-system, backup, security, and diagnostic services.
We may also disclose information when reasonably necessary to comply with law, respond to lawful requests, protect users or the service, investigate fraud or abuse, or complete a business transfer subject to appropriate safeguards.
ADVERTISING AND PRIVACY CHOICES
Eligible users may see banner and interstitial ads. Premium users do not receive these ads after the entitlement is confirmed. Users can review advertising choices from THE LOCKER by selecting PRIVACY & AD CHOICES. Personalized advertising is used only after the corresponding choice or consent. Restricted or child-directed modes request limited, contextual, or non-personalized advertising as applicable.
CHILDREN'S PRIVACY
Shaft & Spoils may be offered to a mixed-age audience where permitted by Google Play settings. The app presents advertising privacy choices before initializing advertising services. A user identified as under 13 is placed in child-directed mode and advertising identifier use is restricted. We do not knowingly request a child's name, phone number, precise location, contacts, messages, or media. Account creation uses an email address and should be completed by a parent or legal guardian when parental consent is required by applicable law. Parents or guardians may request deletion using the instructions above.
DATA SECURITY
Information transmitted by the app is encrypted in transit using HTTPS/TLS. We use authenticated requests and access controls intended to protect cloud player records. No security method is guaranteed to be completely secure, and users should protect their account credentials and device access.
DATA RETENTION
Cloud account and gameplay data are retained while the account remains active and are deleted when the account is deleted, subject to the limited exceptions described above. Local data remains until it is cleared, overwritten, or the app is uninstalled. Purchase, refund, fraud-prevention, security, tax, accounting, and legal records may be retained for up to seven years or as otherwise required by law. Service providers may apply their own retention schedules.
INTERNATIONAL PROCESSING
Our providers may process information in countries other than the user's country. Where required, they use contractual or legal safeguards for international transfers.
YOUR CHOICES AND RIGHTS
Depending on your location, you may have rights to access, correct, delete, or restrict certain personal information. You may request assistance by emailing arcoappstudio@gmail.com. You may also clear local app storage, uninstall the app, change advertising choices in the app, or use device and Google account privacy controls.
CHANGES TO THIS POLICY
We may update this Privacy Policy when the app, providers, or legal requirements change. The revised policy will be posted on this page with an updated effective date.
CONTACT
For privacy questions, access requests, or deletion requests concerning Shaft & Spoils, contact Arco App Studio at arcoappstudio@gmail.com.