Archery Duel privacy policy

Guest identity and data on your device

You can play without an email address or password login. The game creates a random guest identity and an authentication secret on your device. It stores these locally, together with your nickname, settings, tutorial progress and records of games against local bots.

The guest identity lets our service recognize a returning player. Server records are linked to a player ID derived from that identity, so these records are not anonymous.

Your nickname may be visible to opponents. Please do not include your real name, email address or other personal information in it.

Automatic online check-in and usage analysis

With an internet connection, the app automatically checks in with our service after launch, after you return following a long absence, and when you request online play. This can happen before you press Play Online.

The check-in sends your derived guest player ID and authentication proof, nickname, platform, app build, time-zone offset and local bot results. We use these to recognize returning players, initialize matchmaking and skill ratings, check supported builds, and analyze activity and player retention.

Our service stores guest player records, activity days, skill ratings and match records in a Postgres database. It also records aggregate player, matchmaking-search and match counts. Rectfy's own service performs this usage analysis.

Online play, IP addresses and sharing

Online matchmaking and friend rooms handle room requests, gameplay inputs, match results, ratings, and diagnostics about connections and game-state desynchronization. Players can send preset emoji reactions. There is no free-text chat.

Our service and game servers receive your IP address to communicate with your device and apply abuse limits. We send player IP addresses to Edgegap to place a nearby match server. An IP address can reveal approximate location. Deployment settings sent to Edgegap also contain player nicknames.

The game does not request GPS location.

Service providers and international processing

• Railway hosts our matchmaking service and player database in Singapore. It processes the service data described above. Read Railway's privacy policy.
• Edgegap runs match servers and deployment services. Match-server locations vary with placement. It receives player IP addresses and nicknames as described above and processes online-match traffic on its servers. Read the privacy policy in section 14 of Edgegap's terms.
• Google processes email sent to our Gmail support address. If you email us, we receive your email address and the information you include. Read Google's privacy policy.

These services can process information outside your country. We do not promise that all data stays in your country.

Advertising, purchases and analytics SDKs

The current game has no ads, purchases, third-party analytics SDKs, advertising identifiers, or advertising or cross-app tracking. The Archery Duel build does not contain Firebase Analytics or Crashlytics. Rectfy's service still collects and analyzes usage data as described in this policy.

Firebase, Crashlytics and advertising disclosures in policies for other Rectfy apps do not apply to Archery Duel.

Security and data in transit

HTTP requests to our service use HTTPS. Real-time UDP gameplay packets are authenticated but are not encrypted. Authentication does not prevent someone who can observe the network traffic from reading those gameplay packets. Not all game data is encrypted in transit.

How long data remains

Guest player rows, activity days and match history currently have no verified automatic expiry. They can remain in our player database without a fixed expiry date.

The match service's round-input log cleanup is configured to prune files older than two days, or sooner if the total files exceed 2 GB. Cleanup runs on a ten-minute cycle. These temporary files can disappear earlier on redeployment.

That cleanup applies only to those round-input files. It is not a two-day deletion guarantee for player database records, infrastructure logs, backups or Edgegap deployment records.

We have not confirmed the specific retention periods that apply to our Railway platform logs and database backups or to Edgegap deployment records. We have also not confirmed a fixed retention period for support email. This policy does not promise exact deletion periods for those records.

Privacy inquiries, local data and server deletion

The game currently has no in-app Delete my data action and no verified self-service process for deleting server data. Uninstalling the game does not delete server records. Platform backups can also affect whether local data persists or returns after reinstallation.

You can send privacy inquiries, including questions about access or deletion, to teamrectfy@gmail.com. Email contact is not an automatic server-deletion mechanism. A nickname alone cannot reliably identify or authenticate a guest record, and a complete operational process for verifying a guest record and deleting its associated server data has not yet been verified.

Do not send a password, raw guest secret or authentication proof by email. We do not promise immediate removal of all related data or a guaranteed response deadline.

Age and audience

The game's stated audience is players aged 13 and older. A store age rating does not verify a player's age. The current game does not have a verified age gate or parental-consent flow.

If you are a parent or guardian with a concern about a child's information, contact teamrectfy@gmail.com. This contact does not promise an implemented child-data identification or deletion process.

Changes and contact

We will update this page when these disclosures change and show the last updated date above.

Operator: Rectfy. Privacy contact: teamrectfy@gmail.com.