Privacy Policy

This Privacy Policy explains how 1MS Games Studio ("1MS Games", "we", "us") collects, uses, and protects information when you use our services. It covers our mobile apps published on Google Play (Android) and the App Store (iOS), our web games, and the website at 1ms.games. Our Terms of Service govern your use of those services.

1MS Games Studio, Vietnam, is the data controller for the information described here.

1. Information We Collect

We keep data collection minimal, and what we collect differs between our mobile apps and our website.

(a) Information you give us. If you contact us through the website form or by email, we receive your name, email address, and whatever you write in your message.

(b) In our Android and iOS apps. We collect your device's advertising identifier (see section 5), coarse device and app information (device model, OS version, app version, approximate region derived from IP address, language), ad interaction events, in-game events such as levels started and completed and session length, and in-app purchase events (see section 6). In games that offer a leaderboard, we also collect the information described in section 7.

(c) On our website and web games. We do not run third-party analytics on this website, and our web games do not currently display advertising. Your game progress and settings are kept in your browser's local storage and are not sent to us. Our hosting provider keeps standard server logs, including IP address and browser user agent, to deliver the site and protect it from abuse.

We do not ask you to create an account. We do not collect your email address, phone number, contacts, photos, or precise location from inside our games. In games with a leaderboard we do receive the display name from your Play Games profile — see section 7.

2. Why We Process Information, and Our Legal Bases

If you are in the EEA, the UK, or Switzerland, the GDPR requires us to tell you the legal basis for each purpose. These are ours:

• Consent — personalized advertising, and the advertising and analytics processing tied to your advertising identifier. You give this through the consent message in the app or through your device's tracking settings, and you can withdraw it at any time.
• Consent (leaderboards) — showing your display name, avatar, score and rank to the other players in your room. This is separate from the advertising consent above. We ask before the first time anything is published, nothing is published until you agree, and declining leaves you with nothing to delete because nothing was ever sent.
• Legitimate interests — operating and securing our services, serving non-personalized ads, preventing fraud and invalid ad traffic, and understanding in aggregate how our games are played so we can improve them. We balance these against your rights and use the least identifying data that works.
• Performance of a contract — delivering the in-app purchases you make, restoring entitlements, and providing support under our Terms of Service.
• Legal obligation — keeping records required by tax and accounting law, and responding to lawful requests from authorities.

3. How We Use AI and Behavioral Analysis

We use automated systems, including AI models, to analyze aggregated player behavior — such as pacing, difficulty, and engagement — to tune and improve the experience so it stays relaxing and fair. This analysis is used to improve our products. We do not use it to make decisions that produce legal or similarly significant effects on you, and it does not profile you as an individual outside the advertising described in section 5.

4. Cookies, Local Storage, and Identifiers

Website and web games. We use your browser's local storage to remember game progress and settings. We do not currently set advertising cookies or run third-party analytics on this website. If that changes, we will update this page before it does, and where the law requires consent we will ask for it first. The two pages with a form — our contact page and our data request page — load Cloudflare Turnstile to tell people from bots. It sees your IP address and basic browser signals for that check. It does not track you across sites, and it runs on no other page.

Mobile apps. Our apps do not use cookies. They use the device-level advertising identifier provided by Android and iOS, described in the next section. Games with a leaderboard also use an anonymous server-side identifier, described in section 7. It is not an advertising identifier and is not used for advertising.

5. Advertising

Web games. Our web games do not currently display advertising. The capability exists in the site but is switched off. If we turn it on, ads would be served by Google (H5 Games Ads / AdSense), which may use cookies and device identifiers; we will update this page before that happens and, for visitors in the EEA, the UK, and Switzerland, ask for consent before serving personalized ads.

Android and iOS apps. Our mobile games are ad-supported, and they do collect one persistent identifier: your device's advertising identifier — the Advertising ID (AAID) on Android, or the Identifier for Advertisers (IDFA) on iOS. Ads are served by third-party ad networks, primarily Google AdMob, which may work with additional mediation and demand partners.

The advertising identifier is a pseudonymous, device-level ID that Android and iOS provide for this purpose. It is not linked to your real-world identity: we do not connect it to a name, email address, phone number, account, or any other information that identifies you personally, and we make no attempt to combine it with data from other sources in order to work out who you are. You can reset it or clear it at any time using the device settings described below, after which it no longer refers to the same device profile.

Alongside the advertising identifier, the ad and analytics SDKs in our apps process coarse device and app information, ad interaction events such as impressions, clicks and rewarded-ad completions, and in-game events. We use this for two purposes:

• Advertising — to serve ads that are relevant to you rather than random, to measure how ads perform, to cap how often you see the same ad, and to detect invalid or fraudulent traffic.
• Analytics — to understand how our games are actually played, in aggregate, so we can tune difficulty, pacing and clarity and improve the experience.

We do not send your name, email address, precise location, contacts, photos, or gameplay save files to ad networks. Where an individual app is ad-free and collects nothing at all, its store listing and its own privacy notice say so explicitly.

Your choices on mobile. On Android you can reset or delete your Advertising ID and opt out of ad personalization in Settings → Google → Ads; when the ID is deleted, apps receive no advertising identifier at all. On iOS, apps must ask for your permission before tracking you across other companies' apps and websites (App Tracking Transparency); if you decline, the IDFA is not made available to us. You can review this at any time in Settings → Privacy & Security → Tracking. Opting out means ads become non-personalized — it does not remove ads, and it does not reduce any in-game feature.

Consent in the EEA, UK, and Switzerland. Where required, ad-supported apps show a consent message before personalized ads are served, and your choice is respected on subsequent launches. You can change it later from the app's settings screen where that option is offered. That message covers advertising only. The separate choice about publishing your name on a leaderboard is described in section 7, and agreeing to one does not agree to the other.

Ads are provided by independent companies that act as their own data controllers. Their handling of data is described in their policies, including the Google Privacy & Terms and the AdMob partner disclosures.

6. In-App Purchases

Some of our games offer optional in-app purchases. We never see or store your payment details. Apple and Google process the payment, and your card number, bank details and billing address stay with them and never reach us.

What we do receive from the store is a transaction or order identifier, which product was bought, and whether the purchase succeeded. We use this to deliver the content, to restore purchases on a new device, and to look up a transaction when you write to us about a refund or a missing item.

Our analytics also records purchase events — which product was bought, when, and its value — associated with your advertising identifier or app instance rather than with your name or email. We use this to understand which content players find worth paying for, to measure how offers perform, and to plan what to build next. Ad networks may use purchase signals to measure campaign performance.

Section 7 of our Terms of Service explains how refunds work.

7. Leaderboards

Some of our games — currently Quiet Arrows on Android — offer a leaderboard. This is the only feature in which information about you leaves your device and is shown to other players, so it is described separately here.

What is published. When the leaderboard is active for you, four things are visible to the other players in your room: your display name, your avatar, your daily score, and your rank. On Android the display name comes from your Play Games profile — for most people that is a name they chose for their Google account, and it may be their real name.

What is not published. Your save file, your purchases, your advertising identifier, and the identifier below are never shown to other players.

The identifier we use. To keep your score attached to you between sessions, our servers create an anonymous Firebase identifier for your installation. It is not an account: no password, no email address, no way to sign in. It is created without asking you for anything, it belongs to this installation on this device, and uninstalling the app loses it — installing again creates a new one.

How long it is kept. Room standings, the entries inside them, and the sampled score pool used to fill quiet rooms are deleted three days after they are written. Deletion is carried out by Google's storage service on a best-effort schedule — usually within 24 hours of the expiry time, sometimes later. The player record itself, which holds your display name, avatar and tier, has no automatic expiry and is kept until you delete it.

Scores that fill quiet rooms. When a room has few real players we fill the remaining places with synthetic players, whose scores are sampled from real scores recorded the previous day and shifted down. A score that originated with you can therefore appear once more — attached to an invented name and avatar, carrying no identifier of yours — for roughly four to five days after the day it was set.

Deleting your leaderboard data. The game has a delete action in its settings. It removes your player record and your entries, and stops that installation appearing on the leaderboard again. Three things are worth knowing before you use it:

• It applies to this installation on this device. If you have played on another device, that device has its own separate record and this action does not reach it. The only way to remove that one is to run the same action on that device. If you no longer have that device — it was lost, sold or reset — you cannot run the action on it. Write to us through the request form at 1ms.games/data-request/ and tell us so. The support code is created only when the action is run, so you will not have one. We hold no account or contact details linked to that record, which means we may not be able to find the record you mean. The leaderboard entries linked to it, and the scores in them, expire within about three days of being written; the player record itself (display name, avatar, tier and your most recent scores) does not expire automatically.
• It is not instant. Part of the removal happens in the background and can take up to an hour. Copies already sampled into the pool follow the timing above.
• It is one-way. Afterwards, that installation cannot rejoin the leaderboard.

To honor a deletion request we keep one thing: a record that this installation asked to be removed, holding no name, avatar, or score. It exists so the request is not forgotten and the installation is not enrolled again — not for security, fraud prevention, or any other purpose. That applies to the delete action in the game. If you write to us through the request form instead, we also keep your message for a limited time so we can answer it, and a short record of how we handled the request — the date, the type of request, the support code if you included one, and the outcome, but not your name, email address or message — so that we can show the request was handled.

When the action completes, the game shows a support code. Include it if you contact us about the deletion — we hold no account or contact details, so it is the only way we can find the record you mean. It is shown once and the game does not store it for you.

8. On-Device Data in Our Mobile Apps

Separately from the data described above, our Android and iOS apps keep some things on your device only. Your progress and settings are written to the app's own storage so a game can continue where you left off, and some apps also keep a capped local gameplay log — which level, which action, and how long it took. Your save data and this local log are never uploaded to us automatically; in games with a leaderboard, the result of a completed level is sent to our servers as described in section 7, but your save file itself is not. Where an app offers a "send log to the developer" button, nothing leaves your device unless you tap it and choose where to send the file. Uninstalling the app deletes this on-device data permanently.

Our apps do not ask for any of the sensitive runtime permissions: they do not access your camera, microphone, contacts, photos, files, or precise location. They do use the network, and on Android they declare the standard advertising ID permission required to serve ads. Each app's Google Play Data Safety section and Apple App Privacy label reflect exactly what that specific app collects, and are updated before any release that changes it.

9. How We Share Information

In games with a leaderboard, some information about you is shown to other players. Section 7 says exactly which.

We share data with the service providers who help us run our services: ad networks (primarily Google AdMob and its mediation partners), analytics providers, the app stores, our hosting provider, our email and form providers, and Google Firebase, which runs our leaderboard on our behalf. We also disclose information where the law requires it or to protect our rights, safety, or property.

We do not sell your personal information for money. However, under the California Consumer Privacy Act as amended by the CPRA, and under similar laws in other US states, using an advertising identifier to serve personalized advertising can qualify as a "sale" or as "sharing" for cross-context behavioral advertising. If you would rather we did not, opt out using your device settings as described in section 5 — on Android by deleting your Advertising ID or opting out of ad personalization, and on iOS by declining the App Tracking Transparency prompt. We honor those signals, and opting out does not change what the game gives you.

10. Data Retention

We retain personal information only as long as necessary for the purposes described here, or as required by applicable law, after which it is deleted or anonymized. Advertising and analytics events tied to an advertising identifier are retained for a limited period by us and by our providers, and are then deleted or kept only in aggregated form that cannot be traced back to a single device. Records of purchases are kept for as long as tax and accounting law requires. Leaderboard data has its own retention, described in section 7.

11. Security

Data sent between our apps, our website, and our providers travels over encrypted connections (HTTPS/TLS). Access to the limited data we hold is restricted to the people who need it. We hold no payment card data at all, and on-device data is protected by the operating system's own app sandbox. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we do keep the amount of data we hold small deliberately — it is the most reliable protection there is.

12. Children's Privacy

Our services are not directed to children under 13 (or the age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it. In any app that is directed to a mixed or child audience, we do not collect the advertising identifier and do not serve personalized ads; ads shown there are non-personalized and limited to content rated suitable for that audience under Google Play Families and Apple Kids Category requirements.

13. Your Rights

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or erased, to restrict or object to how we process it, and to receive it in a portable form. Where we rely on your consent, you may withdraw it at any time — through the consent screen in the app or your device's advertising settings — without affecting the lawfulness of processing carried out before you withdrew it.

If you are in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with your local data protection supervisory authority. If you are a resident of California or another US state with a comparable law, you have the right to know what we collect, to delete it, to correct it, to opt out of the "sale" or "sharing" described in section 9 and of targeted advertising, and not to be treated differently for exercising any of those rights.

To exercise a right, use the request form at 1ms.games/data-request/, or write to hi@1ms.games. Because we hold no account or contact details for players, we usually cannot connect a request to a specific device on our own, so please include an order ID if your request concerns a purchase, or the leaderboard support code described in section 7. Resetting the advertising identifier does not affect leaderboard data, which is tied to the separate identifier described in section 7. To remove that, use the deletion action described there and include the support code it gives you. We respond within one month, free of charge.

14. International Transfers

We operate from Vietnam, and our service providers operate in the United States, the European Union, and elsewhere, so your information may be processed outside the country where you live. Leaderboard data described in section 7 is stored on Google Cloud infrastructure. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses or another safeguard permitted by law; our ad and analytics providers include those clauses in their own terms. You can ask us for details of the safeguard that applies to you.

15. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. If a future app version begins collecting data it does not collect today, this page and the corresponding Google Play Data Safety declaration and Apple App Privacy label will be updated before that version is released.

16. Contact

1MS Games Studio, Vietnam. Questions about privacy, or to exercise a right: hi@1ms.games.

17. Governing Law

This policy is governed by the laws of the Socialist Republic of Vietnam. This does not deprive you of the protection of mandatory data protection law in the country where you live.

This document is provided for general information and is not legal advice. Please have it reviewed by qualified counsel before production use.