Privacy Policy
Effective October 17, 2026
Arena Together ("Arena", "the app") is made by Goktug Ekinci, an individual developer ("I", "me"). This policy explains what the app collects, why, who it is shared with, how long it is kept, and how you can delete it. Questions: goktug.ekinci@hotmail.com.
No sign-up
Arena doesn't ask for your email, phone number or real name. On first launch it creates an anonymous account (a random user ID) so your groups and scores work across app launches.
What the app collects
| Data | What it is | Why |
|---|---|---|
| Profile | The display name you choose, your emoji avatar or the profile photo you upload, the date you joined | Shown to the members of your groups |
| Groups and gameplay | Groups you create or join, scores, daily results, and recordings of your best runs (your taps and their timing, not video) | Leaderboards, seasons and replays for your group |
| Chat | Messages, replies and reactions you post in a group | Shown to the members of that group |
| Safety | Players you block; reports you send (the reported message or player, their name and photo, the reason) | Hiding blocked players, and reviewing reports |
| Notifications | A push token for your device and your notification settings | Sending the notifications you turned on |
| Purchases | Which groups and seasons you bought Arena+ for. Payment is handled entirely by Apple; I never see your payment details | Turning Arena+ on |
| Usage and diagnostics | App events (for example "game started", "group created", "ad watched"), device model, OS version, app version, crash reports | Understanding how the app is used and fixing crashes |
| Advertising | Ad interactions, device information, IP address, and, only if you allow tracking, your device's advertising identifier (IDFA) | Showing the optional rewarded ads that unlock extra tries |
The app doesn't collect your location, contacts or photo library. When you pick a profile photo, only that one photo is used, cropped to a small square.
Who can see it
Your name, avatar, scores, replays and messages are visible to the members of the groups you're in. They are not public outside your groups.
Service providers
Arena uses these companies to run. Each processes data only to provide its service and is bound to protect it at least as well as this policy describes.
- Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging, Analytics, Crashlytics): stores your account, groups, messages and gameplay; sends notifications; collects usage and crash data. Your account, groups, messages and gameplay are stored in Google Cloud data centers in Europe; usage and crash data may be processed in the United States. Firebase privacy
- AppLovin (AppLovin MAX) and the ad networks it works with: show rewarded ads. If you allow tracking, they may use your advertising identifier to personalize ads and measure them. AppLovin privacy policy
- Resend: delivers report emails to me so I can review them. Resend privacy policy
- Apple: processes in-app purchases and delivers push notifications.
I don't sell your personal data. Your data isn't used to train AI models and isn't shared with anyone else, except where the law requires it.
Tracking and your choices
- Tracking: the app asks for permission before your advertising identifier is used. You can change this any time in iOS Settings → Privacy & Security → Tracking. Without it, you still get ads, just not personalized ones.
- Notifications: turn kinds of notifications on or off in Profile → Notifications, mute a group in its settings, or turn them off in iOS Settings.
- Ads: ads only play when you choose to watch one for an extra try.
How long it's kept
Your data is kept while your account exists. Chat older than a few game days is no longer shown in the app, but it is kept until you delete your data or the group is deleted. Analytics data is kept for up to 14 months and crash reports for up to 90 days. Reports are kept as long as they are needed to keep the community safe.
Deleting your data
In the app, go to Profile → Delete my data. This permanently deletes your account, profile, photo, messages, scores and replays, removes you from your groups, and signs you out. A group you run passes to the member who has been in it longest; a group with no other members is deleted. Arena+ purchases are lost. It can't be undone. Deleting the app alone doesn't delete your data, because it's stored on the server. You can also ask me to delete it by email.
You can also email me to get a copy of your data, correct it, or withdraw consent. Depending on where you live (for example in the EU, the UK or California), you may have further rights under local law, including the right to complain to your data protection authority.
Children
Arena isn't directed at children under 13, and I don't knowingly collect data from them. If you believe a child under 13 is using Arena, email me and I'll delete their data.
Security
Data is sent over encrypted connections and protected by access rules: a group's messages, scores and replays can only be read by its members, and only you can change your profile. Your display name and avatar can be looked up by other Arena users who have your user ID.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Goktug Ekinci · goktug.ekinci@hotmail.com