The short version
We make games, not data products. Here is what this policy says, in four lines. The sections below are the full, binding version.
No tracking on this website
No cookies, no analytics, no ads and no third-party trackers on arcticstarstudio.com.
Games collect what they need
Each game lists exactly what it collects and every SDK it ships with, game by game.
Never sold for money
We don't sell personal data. Personalized ads need your consent where the law requires it.
You stay in control
Change your consent, reset your ad ID or delete your data at any time. No sign-in needed.
Who we are
This Privacy Policy is published by Arctic Star Studio (operated by Soundarraj Sathiyamoorthi) (“Arctic Star Studio”, “we”, “us”), an independent game studio based in India. It explains how we handle personal data when you visit arcticstarstudio.com (the “website”) or play any of our games (together, our “services”).
It applies to every game we publish, on every platform. We haven't released a game yet. Each game will be named here, with its own section, before it is released.
Soundarraj Sathiyamoorthi is the controller of your personal data (in India, the “data fiduciary”), except where this policy says that a store, platform or partner handles data on its own account. Arctic Star Studio is the trading name under which Soundarraj Sathiyamoorthi publishes its games.
Privacy questions and requests go to support@arcticstarstudio.com. Our full contact details are at the end of this policy.
On this website
We built this website to work without watching you.
- No cookies. The website doesn't set cookies or store anything in your browser, so there is no consent banner.
- No analytics, ads or trackers. We don't use Google Analytics, advertising pixels, fingerprinting, session recording or social media widgets.
- Self-hosted fonts. Fonts are served from our own domain, so your browser never contacts Google Fonts or any other font service.
- Hosting logs. The website is hosted by Vercel Inc. To deliver pages and protect the site from abuse, Vercel's servers process technical data about each request: your IP address, browser user agent, the page you asked for and the time. Vercel keeps these logs for a limited period under its own retention policy (Vercel privacy policy).
- Email. If you write to us, we receive your email address, your name if you include it, your message and any attachments. We use them to reply and to keep a record of the conversation.
- Launch updates. If you ask us to tell you when a game launches, we keep your email address only to send you that news. We delete it after the launch email, or after 2 years if the game hasn't launched by then. Reply “unsubscribe” or write to hello@arcticstarstudio.com at any time to be removed.
We don't use visits to this website to identify you, and we don't combine them with data from our games.
In our games
What a game collects depends on the game: what is in it, which platforms it runs on and which services it uses. The game-by-game section lists exactly that. Across our games, the categories are:
- Device and app data: device model, operating system and version, language, app version, and an approximate country derived from your IP address.
- Identifiers: random IDs created when you install or first play a game (an installation ID or player ID) and, only in games that show ads and only where you allow it, your device's advertising ID (AAID on Android, IDFA on iOS).
- Gameplay data: progress, settings, levels played, session length and in-game events, so the game can save your progress and we can see what is fun and what is frustrating.
- Crash and performance data: crash logs, stack traces and the state of the device when a problem happened.
- Purchase data: if you buy something in a game, the store sends us a transaction or order ID and the item you bought, so we can deliver and restore it. We never see your card or bank details.
- Account data: only in games that offer accounts or cloud saves: a player ID, the sign-in service you link (such as Google Play Games or Game Center) and your save data.
- What you send us: support emails, bug reports and feedback, including your player ID if you share it.
What our games don't collect
Our games don't ask for access to your contacts, photos, camera, microphone or precise location. If a future game needs one of these, its section will say why, and your device will ask for your permission first.
Stores and platforms
Google Play, the App Store, Steam and itch.io handle downloads, store accounts and payments under their own terms and privacy policies. When a game uses platform features such as achievements, leaderboards or cloud saves, the platform processes that data and shares with us only what the feature needs, such as your player ID and scores.
Third-party SDKs
Our games are built with Unity and use a small number of software development kits (SDKs) from other companies. Some act only on our instructions, as our processors or service providers (crash reporting and analytics, for example). Others, such as ad networks and platform services, also use data for their own purposes under their own policies. Each game's section names its SDKs, what they do and the data they process, with a link to each provider's privacy policy.
Game by game
We haven't released a game yet. Before each game is released, it gets its own section here listing exactly what it collects and which SDKs it uses. Until then, the general rules in this policy apply.
Ads and your consent
Ads help keep games free to play. The rules below apply to any of our games that shows ads.
- Your permission comes first where the law requires it. In the European Economic Area, the UK and Switzerland, a game that shows ads asks for your consent through Google's User Messaging Platform, a consent tool certified under the IAB Transparency & Consent Framework, before the game stores or reads information on your device for ads and before your data is used for personalized ads. If you don't consent, you may still see limited ads that don't use your advertising ID or store anything on your device.
- On iPhone and iPad, a game reads your advertising identifier (IDFA) only if you allow it in Apple's App Tracking Transparency prompt. If you choose “Ask App Not to Track”, you still see ads, but they are not personalized with data from other companies' apps and websites.
- Non-personalized ads are an option. If you allow device storage but turn off personalization, ads are chosen by context, such as the game you are playing and your approximate location, rather than by a profile of you. Ad networks still use limited data to deliver, cap, measure and protect these ads from fraud.
- Rewarded ads are optional. Where a game offers a reward for watching an ad, you decide whether to watch.
- No personalized ads for children. See Children.
Our advertising partners, including Google, may collect or receive information from our games, such as your advertising ID, IP address and ad interactions, and use it to deliver, measure and personalize ads. Learn how Google uses information from sites or apps that use its services.
You can change your mind at any time: see Your privacy choices.
How we use your data
- To run the game: save your progress, sync it across devices, and deliver and restore purchases.
- To fix problems: investigate crashes, bugs and performance issues.
- To improve our games: understand, in aggregate, how levels and features are played.
- To show and measure ads, in games that have them, according to your choices.
- To keep games fair and secure: detect cheating, fraud and abuse.
- To help you: answer your emails, look into problems you report and, if you ask, tell you when a game launches.
- To meet legal obligations: keep tax records, respond to lawful requests and enforce our Terms of Use.
We don't make decisions that have legal or similarly significant effects on you based solely on automated processing. Choosing which ad to show is automated, and you control whether it is personalized.
Legal bases
If you are in the EEA, the UK or Switzerland, we rely on these legal bases under the GDPR and UK GDPR:
| Purpose | Legal basis |
|---|---|
| Running the game, accounts, cloud saves and purchases | Performance of our contract with you (providing the game you asked for) |
| Storing or reading information on your device for ads (personalized or not), personalized ads, and analytics where consent is required | Your consent, which you can withdraw at any time |
| Launch-update emails you ask for | Your consent, which you can withdraw at any time by asking to be removed |
| Crash reporting, security, fraud and cheat prevention, limited ads shown when you don't consent (no advertising ID or device storage; used only to deliver ads and prevent fraud), website hosting logs | Our legitimate interests in keeping our services working, safe and free to play |
| Tax records and responding to lawful requests | Legal obligation |
In India, we process personal data with your consent or for a legitimate use allowed by the Digital Personal Data Protection Act, 2023, such as providing a service you asked for. You can withdraw consent at any time, as easily as you gave it. Withdrawing consent doesn't affect processing that happened before.
Who we share data with
We share personal data only as described here:
- SDK providers named in each game's section, such as Google and Unity. When they act as our processors or service providers, they may use the data only to provide their service to us. Ad networks and platform providers also act as independent controllers for some purposes, under their own policies.
- Stores and platforms (Google, Apple, Valve and itch.io) for purchases, sign-in, achievements and cloud saves.
- Providers that help run the studio, such as Vercel (website hosting) and our email provider.
- Professional advisers, such as lawyers and accountants, under a duty of confidentiality.
- Authorities, when the law requires it, or to protect the rights, property or safety of our players, the studio or others.
- A buyer or successor, if the studio or a game is sold, merged or transferred. This policy, or one at least as protective, would keep applying to your data, and we would tell you before anything changed.
We only work with providers that commit, in their contracts or published terms, to protect personal data at least as well as this policy does.
We don't sell your data
We don't sell personal data for money. Some US state laws, including California's CCPA as amended by the CPRA, treat letting ad networks use your advertising ID for cross-context behavioral advertising as “sharing” (and sometimes as a “sale”) even when no money changes hands. In games that show personalized ads, that may happen. You can opt out at any time: see Opt out of sale or sharing. The website shares nothing.
International transfers
We are based in India, and our providers (including Google, Unity, Apple and Vercel) process data in the United States, the European Union and other countries. Your data may therefore be processed outside the country where you live.
For data from the EEA, the UK or Switzerland, we rely on an adequacy decision (such as the EU-US Data Privacy Framework, where the recipient is certified) or on the Standard Contractual Clauses in our providers' data processing terms. Transfers from India follow the DPDP Act, including any restrictions the Government of India notifies.
How long we keep data
We keep personal data only as long as we need it for the purposes above. After that, we delete it or anonymize it.
| Data | How long |
|---|---|
| Website hosting logs | A short period set by Vercel's log retention, then deleted automatically |
| Support emails | Up to 2 years after our last exchange, or sooner if you ask us to delete them |
| Launch-update requests | Until we send the launch email, or up to 2 years, then deleted |
| Analytics data | Up to 14 months, then deleted or kept only as anonymous totals |
| Crash reports | As long as our crash-reporting provider keeps them (Firebase Crashlytics: 90 days) |
| Account and cloud save data | Until you delete your account or ask us to delete it |
| Advertising data | Held by each ad network under its own retention policy. Resetting your advertising ID breaks the link. |
| Purchase records | Stores keep their own. We keep ours as long as Indian tax and accounting law requires. |
| Data needed for a legal claim | Until the claim is resolved |
To delete your data sooner, see Delete your data.
How we protect data
We use reasonable security practices and procedures that fit the data we hold:
- Encryption in transit (HTTPS/TLS) for the website and for game traffic to our providers.
- Established providers that encrypt the data they store.
- Access limited to the people who need it, with two-factor authentication on studio accounts.
- Collecting less in the first place. Where a game offers sign-in, it goes through Google, Apple, Steam or Unity, so we never see or store your password.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires, including under India's DPDP Act and, where it applies, the GDPR.
Children
Unless a game's section says it is designed for children, our games are made for a general audience and are not directed at children under 13. We don't knowingly collect personal data from a child under 13, or under the age of digital consent in their country (up to 16 in parts of the EU), without verifiable parental consent.
Under India's DPDP Act, anyone under 18 is a child. We don't track, behaviorally monitor or target ads at children. Where a game asks your age, players who say they are under 18 (or under the relevant age where they live) get non-personalized ads only, and their data is not used for tracking.
If we release a game designed for children, it will follow Google Play's Families policy and the US Children's Online Privacy Protection Act (COPPA): only certified ad SDKs, no personalized ads, no advertising ID collection, and parental consent where required. That game's section will say so.
Parents and guardians: if you believe your child has given us personal data, email support@arcticstarstudio.com and we will delete it.
Your rights
Wherever you live, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct, complete or update it;
- delete it;
- send it to you, or to another company, in a portable format;
- stop or restrict using it, or object to how we use it;
- withdraw a consent you gave us.
EEA, UK and Switzerland
You also have the right to complain to your local data protection authority (in the UK, the ICO). We would appreciate the chance to put things right first.
California and other US states
Residents of California and other US states with privacy laws can ask to know what personal information we collect, use and disclose; to delete or correct it; and to opt out of its sale or sharing for cross-context behavioral advertising. You can use an authorized agent, and we will never treat you differently for exercising these rights. We don't use sensitive personal information for purposes that would require a right to limit it.
India
Under the Digital Personal Data Protection Act, 2023, you can:
- get a summary of the personal data we process, what we do with it, and who we have shared it with;
- have it corrected, completed, updated or erased;
- have your grievance resolved by our Grievance Officer;
- nominate another person to exercise these rights for you if you die or become unable to act.
If you are not satisfied with how we handle your grievance, you can complain to the Data Protection Board of India.
How to make a request
Email support@arcticstarstudio.com with the subject “Privacy request”. Tell us what you would like, which game it is about and, if you can, the Player ID from the game's Settings. We may ask a question only the player would know to confirm the request is yours; we never ask for your password.
Requests are free. We aim to reply within 30 days and always within the time the law allows: one month under the GDPR, 45 days under the CCPA and 90 days under India's DPDP Rules.
Your privacy choices
The quickest ways to control your data, most of them without writing to us:
Change your consent in a game
In games that ask for consent, open Settings → Privacy → Privacy options at any time to review or withdraw your choices for ads and analytics. The new choice applies from then on.
Reset or delete your advertising ID
Your device's advertising ID is what lets ad networks recognize it across apps. Deleting or resetting it, or turning off tracking, cuts that link.
Android
- Open Settings → Privacy → Ads. On some devices it is under Settings → Google → Ads or Security & privacy → More privacy settings → Ads.
- Tap Delete advertising ID (Android 12 and later). Apps then get a string of zeros instead of an ID.
- On older versions, tap Reset advertising ID or turn on Opt out of Ads Personalization.
iPhone and iPad
- Open Settings → Privacy & Security → Tracking.
- Turn off Allow Apps to Request to Track to refuse tracking in every app, or switch off a single game. Apps then can't read your advertising identifier (IDFA).
- On iOS 13 and earlier, use Settings → Privacy → Advertising → Limit Ad Tracking.
Opt out of sale or sharing
To opt out of the “sale” or “sharing” of your personal information for targeted ads, as US state laws define those terms, you can:
- choose non-personalized ads in the game's Settings → Privacy → Privacy options;
- delete or reset your advertising ID, or turn off tracking, as shown above; or
- email support@arcticstarstudio.com with the subject “Do not sell or share my personal information” and the Player ID from the game, and we will confirm the steps that apply to it.
Delete your data
Our data deletion page has step-by-step instructions for every game, and you don't need to sign in to use it.
On the website there is nothing to opt out of: it doesn't use cookies or tracking.
Grievance Officer
In line with India's Information Technology Act, 2000 and rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and with the Digital Personal Data Protection Act, 2023, our Grievance Officer handles concerns about how we process personal data.
- Name
- Soundarraj Sathiyamoorthi
- Organization
- Soundarraj Sathiyamoorthi
- Postal address
- 245, Chinnathurai Complex, Trichy Road, Kunnandarkoil, Keeranur, Pudukkottai District, Tamil Nadu 622502, India
- Resolution time
- Within one month of receiving your grievance
Please write “Grievance” in the subject line. We acknowledge every grievance and resolve it within one month of receiving it.
Changes to this policy
We update this policy when our games or the law change, and the date at the top shows the latest version. If a change is significant, such as a new kind of data or a new purpose, we will tell you in the game or on this website before it takes effect, and ask for your consent again where the law requires. Earlier versions are available on request.
Contact us
For anything about this policy or your data, write to us:
- Studio
- Arctic Star Studio
- Operated by
- Soundarraj Sathiyamoorthi
- Postal address
- 245, Chinnathurai Complex, Trichy Road, Kunnandarkoil, Keeranur, Pudukkottai District, Tamil Nadu 622502, India
- Privacy, support and data requests
- support@arcticstarstudio.com
- Business and press
- hello@arcticstarstudio.com