Legal
Privacy Policy
Last updated 7 October 2026. 3C Arena is made by Xappify. Contact: support@xappify.co.
You can play without creating an account, and the game never asks for your phone number. This page lists exactly what the game and this website store, what goes to the few services we use, and how to delete it.
What we collect
| Data | Why |
|---|---|
| A device key — a random code your device (or browser) generates on first launch | Until you sign in, it is your account: it lets your progress and rating follow you between sessions. We store only a scrambled (hashed) version of it, so we cannot read it back. |
| A player name — generated for you, and changeable | It shows to other players, on the rankings and on your profile page. Offensive names are refused. |
| Game progress — rating, coins, owned items, settings and single-player progress | To keep your game state and to run rankings. |
| A sign-in identity — only if you sign in with Google or Apple: the provider's anonymous id for you, your first name, and for Apple a token Apple issues | So you can sign in on another device and keep your account. Your first name becomes your starting player name (with a number after it when it is taken), unless you already chose one; you can change it at any time, and it is not kept apart from your player name. We never receive your email address or your last name from them. Apple's token is kept only so that deleting your account can also end the link with Apple. You can unlink at any time. |
| An email and a password — only if you create an account on our website (3carena.com/account) instead of using Google or Apple | The email lets you sign back in, confirm the address, and receive a password reset link if you ask for one (sent through Amazon SES in Sydney). The password is stored as a scrambled (hashed) value we cannot read back. Used for nothing else and never shared. |
| A profile picture — only if you upload one | Shown next to your name. Stored in our cloud storage (Amazon S3); replacing or removing it deletes the previous image. |
| Country — looked up once from your IP address, when you first play or sign in; we do not store the address itself | Shown as a flag beside your name, and used to place you on the Region leaderboard, which groups players by continent. The lookup is done by a third party (ip-api.com), which briefly receives your IP address for that one request. |
| Friends and clubs — your friends, friend requests, invitations, the players you block, the clubs you join, and when you were last online | To show your friends whether you are online and let them invite you to a game. Blocked players see none of this. |
| Reports — if you report a player, or someone reports you: who, the reason, and the moderator's decision | To review offensive names and pictures, harassment and cheating. The reported player is never told who reported them. |
| Match records — the result of each online match and every shot played in it | Match history, rankings, tournaments, and checking that results are genuine. |
| Purchases — what you bought in the game and the store's receipt | To give you what you paid for and restore it on a new device. Apple or Google take the payment; we never see your card. Receipts are checked through Qonversion, which receives them with your player id. |
| Usage statistics — which screens and modes are used, match and level outcomes, load times, and broad bands such as platform, language and rating range | To see what works and what to improve, through Google Analytics (Firebase on phones). It is tied to a random analytics id, never to your name, email or player id. Advertising use is switched off. You can turn it off in Settings → Privacy. |
| Technical data — your IP address and basic request details in server logs | Security, abuse prevention and diagnosing faults. Logs are short-lived. |
| Beta list email — only if you join the list on this website, with the platforms you tick | To send you one welcome email now and one when the beta opens (sent through Amazon SES in Sydney). Every email has a link to remove yourself. Kept until the beta ends or you remove it. Never used for anything else. |
We do not show ads, use advertising networks, or track you across other companies' apps and websites. We do not sell your data. It goes only to the services named above, for the purpose given. The website itself sets no cookies and stores only your light or dark theme choice. The browser version of the game, at /play/, keeps your device key, settings and progress in your browser's storage, and while usage statistics are on, Google Analytics sets its own cookies there. Clearing this site's data removes them.
What is public
Your player name, picture, country flag, rating, rank and totals, your tournament results, and your ranked (Quick Match) matches, including every shot, are public. They appear on the rankings, tournament brackets, your profile page and in match replays that anyone with the link can watch. Private rooms and local-network games are never shown.
If you email us
We keep the email and its contents so we can answer you and follow up. Nothing more.
Where it is stored
On servers we run in Amazon Web Services' Sydney region (Australia). Connections use HTTPS. Google Analytics and Qonversion store what they receive on their own servers.
How long we keep it
- Account and progress: until you delete your account.
- Match records: kept as part of rankings and other players' history. When you delete your account your name is removed from them.
- Purchase records and reports: kept after deletion, without your name, because the stores, tax rules and moderation require them.
- Usage statistics: for the retention period set in Google Analytics, at most 14 months.
- Server logs: a short period for security and debugging.
- Beta list: until the beta ends or you ask us to remove it.
Your choices
Delete your account yourself, right away: in the game under Settings → Account → Delete account once you are signed in, or on the website under Account → Security. This removes your sign-ins, name, picture, country, friends, coins, items and progress, and ends a Sign in with Apple link with Apple. See Delete your account.
You can also ask us for a copy of your data, ask us to correct it, or ask us to delete it by emailing support@xappify.co. We answer within 30 days. Usage statistics can be turned off at any time in Settings → Privacy.
Deleting the app alone does not delete data held on our servers.
Children
3C Arena is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.
Changes
If this policy changes we will update this page and its date. Significant changes will also be announced in the game.