Privacy Policy

Effective date: October 10, 2026

This privacy policy describes how Crosshair Lab for FPS Aim (the "App"), provided by Deniz Ozagac (the "Developer"), collects, uses, and shares information when you use the App.

1. What information do we collect?

Crosshairs you design

The crosshairs you design and save, and your settings in the App, are stored only on your device. When you copy a share code or console commands, they go to your device's clipboard and are not sent to the Developer. The App's analytics record that you copied a code and for which game, but never the code itself.

Personal information you disclose to us

The App does not require you to create an account or provide any personal details to use it.

During the first launch, the App asks which game you play and what your main goal is, such as creating your own crosshair or using a pro's. Your two answers are sent to the analytics services described below, as part of your usage data.

If you contact support by email, we receive the information you choose to share, such as your name and email address. When you write from the App's settings, the subject line also contains the App version, your RevenueCat user ID and your country code, so we can find your subscription. You can see and edit the subject before you send it.

Payment data. Purchases and subscriptions are processed through Apple's App Store. Payment details are handled and stored by Apple, not by the Developer. The Developer uses RevenueCat, a subscription management service, to process your subscription status. This involves receipt information and device identifiers, not your payment details. If you installed the App after tapping an Apple Search Ads ad, Apple provides an attribution token that tells RevenueCat which ad campaign led to the install.

Information automatically collected

The App uses analytics services (Amplitude and Google Firebase Analytics) to understand how the App is used and to improve it. These services automatically collect usage and diagnostic information such as device model, operating system version, language, app version, in-app events (for example, that a crosshair was saved, a code was copied or a subscription was bought), session information, and approximate region derived from IP address.

The App also loads its settings from Google Firebase Remote Config. Firebase records technical diagnostics, such as the version of its software in the App, to keep these services working.

Tracking and ad measurement

The Developer advertises the App with Google Ads. To learn which ads bring people to the App, Google uses two of the events Firebase Analytics records: the first time you open the App, and each subscription you buy, with its product, price and currency.

When you first open the App, iOS asks whether the App may track your activity across other companies' apps and websites. If you allow it, Firebase Analytics collects your device's advertising identifier (IDFA), and RevenueCat receives it with your subscription records. Google can then match your first open and your purchases to the Developer's ads you saw or tapped, for example on Google Search, YouTube or in other apps. If you decline, the App does not collect the advertising identifier, and Google receives the first open and purchase events without it. Section 8 explains how to change your answer later.

Information collected on this website

This website sets no cookies and runs no analytics. Google Firebase Hosting, which serves the pages, processes your IP address to deliver them.

2. How do we use your information?

The Developer processes information based on legitimate business interests, contract fulfillment, legal obligations, and user consent.

• Service delivery. Information enables delivery of the App's features, including managing your subscription.
• Customer support. Information you send by email is used to respond to inquiries and address service issues.
• Analytics and improvement. Usage data helps the Developer understand which features work well and fix problems.
• Order fulfillment. Purchase information is used to unlock premium features and manage subscriptions.
• Ad measurement. First opens and subscription purchases show the Developer which of its ads work, as described in section 1.

The App does not show ads and does not send marketing emails. It tracks you across other companies' apps and websites only if you allow it, and the Developer uses that tracking to measure its own ads and for nothing else.

3. Will your information be shared with anyone?

The Developer shares information only with service providers needed to operate and advertise the App, for legal compliance, rights protection, or business obligations.

Service providers. The following third parties process data on the Developer's behalf:

• Apple processes payments and subscriptions, and provides the Apple Search Ads attribution token.
• RevenueCat manages subscription status.
• Google provides analytics, remote app settings and website hosting through Firebase, and measures the Developer's Google Ads campaigns.
• Amplitude provides usage analytics.

Legal bases for processing:

• User consent for specific purposes
• Legitimate business interests
• Contract performance
• Legal obligations and law enforcement compliance
• Vital interests involving safety or illegal activity investigation

Business transfers. Information may be shared during mergers, asset sales, financing, or business acquisitions.

Personal data sales. The Developer does not sell personal information to third parties.

4. What is our stance on third-party websites?

The App is not responsible for the safety or privacy practices of third-party linked websites. Users should review third-party privacy policies directly.

5. How long do we keep your information?

Information is retained only as long as necessary for the purposes described in this policy or as required by law. When no legitimate business need exists, information is deleted, anonymized, or securely isolated from further processing.

6. How do we keep your information safe?

The Developer implements technical and organizational security measures to protect information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, and users access the App at their own risk.

7. What are your privacy rights?

Regional rights

Residents of the European Economic Area and United Kingdom possess rights including access to personal information, rectification, erasure, processing restrictions, and data portability. Users may withdraw consent at any time. EEA and UK residents may complain to their data protection supervisory authority.

Swiss residents can contact data protection authorities through the Federal Data Protection and Information Commissioner.

Exercising your rights

The App does not use accounts, so there is no account to manage or delete. Deleting the App removes the crosshairs and settings stored on your device. To request access to or deletion of analytics data associated with your device, contact contact@marcana.app. Requests are handled within 30 days, though legal requirements may necessitate retention of some records.

8. Controls for do-not-track features

The App asks for permission to track through Apple's App Tracking Transparency prompt, and it collects the advertising identifier only if you allow it (see section 1). You can change your answer at any time in the iOS Settings app under Privacy & Security, then Tracking.

9. Do California residents have specific privacy rights?

Shine the Light law

California residents may request information annually regarding personal information categories disclosed to third parties for marketing purposes and third-party names and addresses. The Developer does not disclose personal information to third parties for their direct marketing purposes.

CCPA privacy notice

Resident definition. California residents are people who are in California for other than a temporary or transitory purpose, and people domiciled in California who are outside the state for a temporary or transitory purpose.

Collected personal information categories:

• Identifiers (device and app instance identifiers, your RevenueCat user ID, and the advertising identifier if you allow tracking)
• Commercial information (subscription purchases)
• Usage data, including your two answers from the first launch
• Approximate location (region derived from IP address)
• Diagnostics data

Data usage and sharing. Information collection and sharing practices are detailed throughout this privacy notice.

Service provider disclosures. The Developer may disclose information to service providers through written contracts for processing on behalf of the business.

Personal data sales. The Developer does not sell personal information for money. The App sends your first open and your subscription purchases to Google, which uses them to measure the Developer's ads (section 1). If you allow tracking, the App also shares your advertising identifier with Google, so Google can link these events to the ads you saw or tapped. California law may treat this as sharing personal information. Turning tracking off in the iOS Settings app (section 8) stops the advertising identifier from being shared. The first open and purchase events are still sent, without it.

Consumer rights

• Right to deletion. Users may request personal information deletion subject to legal exceptions.
• Right to know. Users may request information regarding collection practices, categories collected, usage purposes, third-party sharing, and business purposes.
• Right to non-discrimination. The Developer will not discriminate against users exercising privacy rights.
• Verification process. Identity verification is required through previously provided information or communication methods. Additional information may be requested for security purposes.

10. Do we make updates to this notice?

The privacy notice may be updated periodically to maintain legal compliance. Material changes are communicated through prominent notices or direct notification.

11. How can you contact us about this notice?

Email: contact@marcana.app

12. How can you review, update, or delete the data we collect from you?

You may request access, modification, or deletion of information by emailing contact@marcana.app.