Privacy Policy for Horus Arcade

Last updated: September 29, 2026

Horus Arcade ("the app", "we", "us"), previously published as Eyecon, is a collection of mobile games (Eyecon, Number Stack, Nova Skim and games added later) published by Bassem Tarek. This policy explains what data the app and its backend process, why, who we share it with, and the choices you have.

1. Data we process

Account and profile

You can play as a guest or sign in with Google or Apple. Depending on how you sign in we store:

• an internal user ID
• display name
• email address (Google or Apple sign-in; with Apple this may be a private relay address) and profile picture URL (Google sign-in only)
• account provider (guest, Google or Apple)

Gameplay and progression

• level, XP and coins
• game statistics (games played, wins, online rating, streaks, best times)
• for each game: your saved progress, the scores of your runs and your best score
• unlocked and selected themes, backgrounds and card backs
• leaderboard entries and online match history (room, opponent, result)
• Google Play Games achievements and leaderboards, if you enable Play Games

Purchases and subscriptions

In-app purchases and the Premium subscription are handled by the Google Play Store or the Apple App Store and RevenueCat. We receive and store product IDs, transaction IDs, platform and subscription status so we can deliver what you bought and restore it on a new device. We never see your payment card details.

Advertising

The app shows ads (banner, interstitial and rewarded videos) through the Appodeal mediation platform, which serves ads from partner networks including Google AdMob, AppLovin, Unity Ads, Mintegral, Vungle (Liftoff), InMobi, ironSource, Pangle, Chartboost, DT Exchange, BigoAds, Yandex Ads, myTarget, Moloco, PubMatic, Smaato, MobileFuse, Ogury, Start.io, TaurusX, Verve, Amazon Publisher Services, BidMachine and Bidon. To deliver, measure and (with your consent) personalize ads, these partners may process:

• the Android Advertising ID (resettable)
• IP address and approximate (coarse) location derived from it
• device information (model, OS version, language, screen size, network type)
• app information (package name, version) and ad interaction events (views, clicks, completed rewarded videos)

Where required by law (for example in the EEA, UK, Switzerland and several US states) the app shows a consent dialog before any ad is requested, and you can change your choice at any time from Settings → Ad privacy settings. If you decline, ads are still shown but are not personalized. Premium subscribers do not see banner or interstitial ads.

We also receive aggregate ad revenue information from Appodeal (network, placement, estimated revenue) that is not tied to your identity. Our authorized sellers list is published at /app-ads.txt on this domain.

Rewarded ad coins

When you choose to watch a rewarded video for coins or a theme unlock, our backend records the placement, the reward and the time of the claim so daily limits can be applied fairly.

Push notifications

If you allow notifications, the app registers a device token with Firebase Cloud Messaging and our backend stores it to deliver game notifications (for example level-ups). You can disable notifications in your device settings at any time.

Local data

Settings (sound, haptics, difficulty, appearance), best times, ad pacing and the "ad-free day" state are stored on your device only.

Diagnostics

Our servers keep short-lived technical logs (request path, timestamp, status, user ID for authenticated requests) to keep the service running and to investigate abuse.

2. Why we process data (legal bases)

3. Third parties we share data with

• Appodeal and its ad networks (listed above) — ad delivery and measurement.
• Google — Google Sign-In, Google Play Games Services, Google Play Billing, AdMob, Firebase Cloud Messaging.
• Apple — Sign in with Apple and App Store purchases (iPhone app).
• RevenueCat — purchase and subscription management.
• Hosting providers — our backend and database run on Fly.io and Neon (EU/UK regions).

We do not sell your personal data.

4. Retention

• Account and progression data: kept while your account exists. Guest accounts inactive for 30 days are deleted automatically.
• Purchase records: kept as long as needed to honor the purchase and meet legal obligations.
• Rewarded ad claims and server logs: up to 90 days.
• Advertising data: retained by the ad partners according to their own policies.

5. Your rights and choices

• Ad personalization: change or withdraw consent in Settings → Ad privacy settings, or reset your Advertising ID in Android settings.
• Remove ads: subscribe to Premium, or watch rewarded videos for an ad-free day.
• Access, correction, deletion: delete your account and its data at any time in the app under Settings → Delete account, or email us and we will export or delete your account data. See the Horus Arcade account deletion instructions. Signing out of a guest account and uninstalling the app also removes local data.
• EEA/UK residents: you may also lodge a complaint with your data protection authority.
• California residents: you can opt out of the sharing of personal information for cross-context behavioral advertising through the same Ad privacy settings screen.

6. Children

Horus Arcade is intended for a general audience and is not directed at children under 13 (or the applicable age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

7. Security

Data is transmitted over HTTPS and stored in access-controlled databases. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version, and material changes will be announced in the app.

9. Contact

• Email: ibassemtarek@gmail.com
• Instagram: @eyecongame