This Privacy Policy explains how Fantasy Arena collects, uses, shares, and protects personal data when you use the Fantasy Arena mobile application and related services (the "Service").
We collect only the data we need to operate, measure, and improve the Service.
A) Account and identity data
B) Gameplay and app activity data
C) Device and technical data
D) Advertising attribution and analytics data
E) Support data
Based on the current design of the Service, we do not collect:
We do not use GPS, device-location services, IP address, SIM information, network information, device locale, or store region to determine or automatically fill the country-of-residence field. Basic IP addresses may still appear in server logs as described under Device and technical data above, but they are not used to populate this field.
The auth/account service is the source of truth for the selected country. A manual country selection is not proof of a user’s current physical location and is not, by itself, a legal eligibility determination.
We use Firebase Analytics to understand how users interact with the Service, improve performance, and measure stability. Firebase Analytics may process device identifiers and usage events for analytics purposes, subject to Google/Firebase settings and configurations implemented in the app.
We use AppsFlyer to measure which marketing campaigns lead to an app's first open and, for eligible accounts, selected later actions such as registration, team creation, and league participation. On first open, before you sign in, AppsFlyer may process technical device information, an advertising identifier where permitted by your device and applicable platform rules, and ad or referral information to attribute the install. We do not send pre-sign-in gameplay events for optional product analytics. After sign-in, we suppress optional in-app analytics for accounts excluded from product analytics; an install-attribution signal already sent on first open cannot be withdrawn retroactively.
AppsFlyer and advertising partners including Meta (Facebook and Instagram) may exchange limited attribution and campaign information to measure our ads. Apple's tracking permission and other applicable device choices continue to apply. Where identifying attribution is unavailable, we may use limited or aggregated measurement instead.
We do not send the country of residence you selected, or an event recording country selection, to AppsFlyer, Firebase advertising attribution, or any advertising SDK. This statement applies only to the manually selected country field; it does not mean that the Service has no other analytics or attribution practices described in this Policy. Service providers operating the auth/account infrastructure may process the account record on our behalf as described in “Sharing and Disclosure.”
Where required by Apple, the app may ask for your permission to allow tracking across apps and websites owned by other companies. If you grant permission, we and our service providers may use permitted identifiers to measure advertising performance and attribution. If you deny permission, we will respect your choice and will use more limited or aggregated measurement where available.
We may share personal data with:
We do not sell personal data.
Your personal data may be stored or processed outside Saudi Arabia depending on our hosting and service provider infrastructure. Where cross-border transfers occur, we will take steps intended to comply with applicable requirements under Saudi data protection laws and regulations.
We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, maintain security, measure performance, and improve the Service. If you request account deletion, we will take steps to delete or anonymize your account data within a reasonable timeframe, except where we must retain certain information for legal, security, analytics, fraud prevention, or operational reasons.
We retain the selected country of residence with the account for as long as the account is maintained and as needed for the purposes described above. When account data is deleted or anonymized following a verified deletion request, the country field will be deleted or anonymized with the account, except for any retention accurately described in this Policy.
We implement reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. No system is completely secure.
Subject to applicable law, you may have rights to request access to, correction of, or deletion of your personal data, and to withdraw consent where processing is based on consent. You may also manage tracking permissions through your device settings where available. To exercise these rights, contact marwan@fantasyarena.me. We may need to verify your identity before fulfilling requests.
To request correction of your country of residence, contact marwan@fantasyarena.me. We may verify account ownership before making the correction.
The Service is not intended for children under 13. If we learn that we have collected personal data from a child under 13, we will take steps to delete it.
We may update this Privacy Policy from time to time. We will update the "Last Updated" date above. Continued use of the Service after updates means you acknowledge the updated policy.