Spot On Arena
Privacy policy
Last updated: 4 October 2026
In short. Spot On Arena has no accounts and never asks for your name, email or phone number. Your solo history stays on your phone. A party only shares what the game needs: the nickname you type, your colour and your scores, with the other phones in that party. If you play the free version, Google shows ads in solo mode, and asks for your consent first where the law requires it. There are no analytics and nothing is sold.
1. Who is responsible
The app Spot On Arena and the website spotonarena.com are published by:
Hinoro Studio (EI)47 route de 3 maisons, 57370 Phalsbourg, France
contact@spotonarena.com
This publisher is the data controller for the data described below, except where a provider acts as an independent controller (section 5).
2. What the app collects and why
| Data | When | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| A random anonymous identifier (Firebase Anonymous Authentication) | When you host or join a party | Recognise your phone inside a party and stop other phones from writing in your name | Performance of the service you ask for (art. 6(1)(b)) |
| The nickname you type, your player colour, when you joined, whether you are connected | When you host or join a party | Show you to the other players | Performance of the service (art. 6(1)(b)) |
| Your scores, your in-game actions (such as a tap and its time) and your votes | During a party | Reveal the results, rank the players, compute standings and trophies | Performance of the service (art. 6(1)(b)) |
| Technical data handled by Google when the app talks to Firebase (IP address, device and connection information) | During a party | Deliver the service and protect it against abuse | Legitimate interest in a secure service (art. 6(1)(f)) |
| Advertising data handled by Google AdMob (see section 4) | Free version, solo mode only | Show ads that pay for the free version, measure them and prevent fraud | Your consent for personalised ads (art. 6(1)(a)); legitimate interest for non-personalised ads (art. 6(1)(f)) |
| Purchase confirmation of the full version | When you buy or restore the full version | Unlock the games you paid for | Performance of the contract (art. 6(1)(b)) |
A nickname is whatever you choose to type: you do not have to use your real name.
3. What stays on your phone
Your solo history, the ghosts you race against, your perception profile, medals, daily-challenge results and settings are stored only on your device. They are never sent to us. Uninstalling the app deletes them.
Camera. The camera is only used to scan a party's QR code. The image is processed on your phone; no picture is stored or sent anywhere.
Motion sensors. Some games read the gyroscope and accelerometer while you play them. Those readings are processed on your phone and only the resulting score is shared with the party.
4. Ads (free version, solo mode)
The free version shows an occasional ad between solo games, provided by Google AdMob. No ad is ever shown during a party, and none once you own the full version.
To show and measure ads, Google may collect your device's advertising identifier, your IP address, information about your device and the app, and how you interact with the ad. In the European Economic Area, the United Kingdom and Switzerland, the app asks for your consent with Google's consent form before the first ad, and only shows personalised ads if you agree. You can change your choice at any time from Practice → Privacy and ads in the app.
On iPhone, the app does not ask for permission to track you across other companies' apps, so it does not access your advertising identifier (IDFA). On Android you can reset or delete your advertising ID in your phone's settings.
Google uses this data as an independent controller under its own policy: How Google uses information in ads.
5. Who receives the data
- The other players in your party see your nickname, colour, scores and votes.
- Google Ireland Limited (Firebase Realtime Database, Firebase Authentication, Firebase Hosting) processes data on our behalf as a processor. Party data is stored in Google's europe-west1 data centre (Belgium).
- Google (AdMob) for ads, as an independent controller (section 4).
- Apple (App Store) and Google (Google Play) process your purchase under their own privacy policies. We never see your payment details.
Google may process data outside the European Union, including in the United States. Such transfers rely on the EU–US Data Privacy Framework, under which Google LLC is certified, and on the European Commission's standard contractual clauses.
We do not sell your data, and we do not use any analytics or crash-reporting service.
6. How long it is kept
- Party data is only needed for the party. A room can no longer be joined two hours after it was created; its code can then be reused by a new party, which overwrites it. Until then, it stays in the database, and you can ask us to delete it at any time (section 7).
- Your anonymous identifier stays on your phone until you uninstall the app. Firebase also keeps a record of it, with no name, email or other detail attached, until it is deleted; you can ask us to delete it.
- Data on your phone is kept until you uninstall the app.
- Advertising data is kept by Google according to its own policy.
7. Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting what was done before. To exercise them, write to contact@spotonarena.com. Since there are no accounts, give us the party code and the nickname you used so that we can find the data. We answer within one month.
If you think your data is not handled properly, you can lodge a complaint with your data protection authority; in France, the CNIL.
8. Children
Spot On Arena is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
9. This website
spotonarena.com sets no cookies, uses no analytics and loads nothing from third parties: even its fonts are served from our own site. Like any web server, our host (Google Firebase Hosting) records technical logs, including your IP address, to deliver the pages and keep them secure.
When you open a party link (spotonarena.com/j/…), the party code is read by the page in your browser to show it to you; it is not stored.
10. Changes
If this policy changes, the new version is published on this page with a new date. If the change is significant, the app will tell you.