Privacy policy
Last updated: 3 October 2026
Arcimals never asks for an account, name, email or password, has no ads and does not track you across other apps or websites. This page explains the little technical data the game uses and why.
Who is responsible
José Miguel Varela Marcos (Mokimokiteam), Bilbao (Bizkaia), Spain. For anything about your data, write to [email protected].
This policy covers the Arcimals app for Android and iOS and the arcimals.com website.
What data we use and why
How each level is played
With Google Analytics for Firebase we record what happens in a run: level started, completed or failed, attempt number, time, the cause of each fall, rewinds used, the ratings you pick at the end of a level ("like", "so-so", "dislike") and whether the purchase was shown or completed. These are numbers and fixed choices, never text you type. They are tied to a random installation identifier and to technical data (device model, system version, language and approximate country).
Why: to learn which levels are too hard or too easy, and which levels and songs people enjoy, so we can tune them.
Crash reports
If the game crashes, Firebase Crashlytics sends us a technical report: the kind of error, where in the code it happened, device model, system version and app version, with a random installation identifier. It contains neither your progress nor anything you type.
Why: to find and fix bugs.
Anonymous identifier and abuse protection
The game creates an anonymous Firebase Authentication session (a random identifier, with no name or email) and uses Firebase App Check, which asks Google Play Integrity or Apple App Attest to confirm that the app is genuine.
Why: to protect the game's online services from tampered copies and abuse.
Where the download came from
Once per installation, the game asks the store (Google Play Install Referrer or Apple AdServices) whether the download came from a campaign, and which one. We do not use the device's advertising identifier (neither IDFA nor the Android advertising ID) and we never ask for tracking permission, because we don't track you.
Why: to learn which campaigns work.
Purchases
Payments are processed by Google Play or the App Store: we never see your card or payment details. To confirm and restore your purchase we use RevenueCat, which receives the store receipt, a random identifier and the download source.
Why: to give you access to what you bought on all your devices.
What stays on your device
Your progress, coins, characters, settings and replays are stored only on your device and are not sent anywhere.
The website
arcimals.com uses no cookies and no analytics. It only remembers the language you choose in your browser. Cloudflare, which hosts the site, processes each visitor's IP address to serve and protect it.
Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR) for gameplay statistics, crash reports, download source and abuse protection. This is minimal data, tied to random identifiers and to nothing that identifies you directly, and without it we could not maintain the game or tune its levels.
- Performance of a contract (Art. 6(1)(b)) to confirm and restore your purchases.
You can object at any time by writing to us (see "Your rights").
Who it is shared with
Only with the providers that run the service on our behalf: Google (Firebase) and RevenueCat, plus Google Play and Apple as stores. We do not sell your data or share it with anyone for advertising.
These providers may process data in the United States. Transfers rely on the EU-U.S. Data Privacy Framework and on the European Commission's standard contractual clauses.
How long it is kept
- Gameplay statistics: 14 months.
- Crash reports: 90 days.
- Purchase data: as long as needed to give you access and meet legal obligations.
Your rights
You can ask for access, rectification, erasure, objection, restriction and portability of your data by writing to [email protected]. Since the game has no accounts, data is tied to random identifiers of your installation: if you write to us, we'll tell you how to find them. Uninstalling the game deletes the local data and makes it start again with new identifiers.
If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority where you live.
Children
Arcimals is suitable for all ages and asks no one for personal data, children included. If you are under 14, show this page to your parent or guardian.
Changes
If what the game does with data changes, we will update this page and its date. If the change is significant, we will also mention it on the store page.