Last Updated: October 20, 2026

This Privacy Policy describes how Ryan Sullenberger ("we," "us," or "our") handles information in connection with the Agari game ("the Game"), available on Steam, the Apple App Store, Google Play, and our website (agari.app).

By using the Game, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Game.

1. Information We Collect

Information Stored Locally on Your Device

The Game saves your preferences and settings locally on your device, including but not limited to:

• Your display name and game settings (audio, match configuration, language, tile and table appearance, and similar preferences)
• Saved games and online-session state, so you can resume an offline match or rejoin an online one
• Match logs and statistics. The Game writes a log of each completed match, single-player and online. A log of an online match includes the display names of the other players at your table. Logging is on by default and can be turned off in Settings.
• Daily Wall result history
• A randomly-generated installation ID, used to recognize you for online-multiplayer rejoin if you disconnect mid-match, as a short suffix on your Daily Wall display handle of the form "DisplayName#short-installation-id" to tell apart players who choose identical display names, and to keep each device's records separate when the Game syncs data across your devices (Section 3)

This data is stored on your device, in the Game's application data storage. It is not transmitted to us or any third party, except as described in this policy for online multiplayer, user-initiated sharing, and your platform's sync, game and backup services (Section 3).

Information Shared During Online Multiplayer

When you use the optional online multiplayer feature, the following information is shared with the other players in your session so the game can be played:

• Display name: Your chosen display name is shared with the other players in your session.
• Installation ID: Your locally-generated installation ID is sent to our relay server and shared with the other players in your session, so that the match host can recognize you if you disconnect and rejoin. Our server holds it in memory only for the duration of your session and a short reconnect window (currently about 90 seconds), and does not store it after that.
• Audio preferences for in-match cues: Your selected voice variant and riichi BGM track choice are shared with the other players at match start so everyone hears the same audio cues attributed to you.
• Gameplay actions: Your in-game actions (tile discards, calls, and similar) are shared with the other players in your session.

All multiplayer game data, including everything listed above, is sent to our relay server, which forwards it to the other players. Players never connect directly to one another, so your IP address is not visible to anyone else at your table. Your connection to us is encrypted in transit (TLS).

The server holds recent messages in memory briefly, so a player who drops can catch up when they rejoin, then discards them.

We use this game data only to deliver it to the players in your session. We may also keep a record of the match itself, described under "Deidentified Gameplay Data" below. Such a record can cover most of what happened in the match, but never your display name, installation ID, or IP address. Nothing else is kept after your session ends.

Our server may keep standard connection logs (IP address and timestamps) for no more than 30 days, for security, abuse prevention, and troubleshooting. We do not use them to track or profile you.

Aggregate service metrics. Our server keeps plain aggregate counts (for example, how many players are connected) to monitor service health. These contain no identifiers and no information tied to any individual.

The list above reflects the categories of information shared at the time of writing. If future game features share additional preferences during online multiplayer, we will update this policy to reflect them.

Information You Choose to Share

The Daily Wall result screen shows a handle like "DisplayName#ABC123", combining your display name with the first six characters of your installation ID so that players who pick the same name can be told apart. Daily Wall is offline, so this handle is built and kept on your device and we never receive it. If you use "Copy Result", it goes to your clipboard, and where it goes after that is up to you.

This applies only to that combined handle in offline modes. When you play online multiplayer, your display name and full installation ID are sent to our relay server, as described above.

Launch-Time Announcement Check

When the Game starts, it downloads a small file from our website (agari.app) so it can show occasional notices, such as advance warning of scheduled server maintenance, and learn which multiplayer servers are currently available. This happens for every player at startup, including those who never play online.

It is a plain file download. It sends no personal data, though like any web request it carries your device's IP address in transit. If the download fails for any reason, the Game simply carries on with no notice shown.

Diagnostic Files

Apart from the announcement check above, the multiplayer and gameplay data described in this section, and the platform services described in Section 3, the Game does not transmit anything automatically.

The Game writes diagnostic files to your device to help troubleshoot crashes and connection problems. They are stored in the Game's data directory on your device (for example %APPDATA%/agari/ on Windows, or the Game's private app storage on iOS and Android).

These include a crash report written if the Game closes unexpectedly, and, while you play online, a record of network events such as connection attempts, interruptions, and reconnections, so that a connection problem can be diagnosed after the fact. We may add other diagnostic files of this kind. You can remove them at any time, as described under "Your Rights" below.

The Game never uploads any of these. They reach us only if you choose to attach one to a bug report. If you do, a file may contain your display name, your installation ID, your game settings, a technical backtrace, and a record of network events during an online session. These files contain no real name, email address, IP address, or payment information.

Deidentified Gameplay Data

We may, now or in the future, collect and retain deidentified records of gameplay, including from online multiplayer sessions, for the purposes of improving the Game, developing new features, analyzing game balance, fixing bugs, and training, developing, and evaluating machine learning and artificial intelligence models (including the Game's AI opponents). This may include:

• Match logs and game statistics
• Tile sequences and in-game decisions
• AI interaction data

These records are created without your display name, installation ID, IP address, or any account identifier. We keep and use them only in deidentified form, we do not attempt to re-identify them or associate them with any individual, and we require anyone who processes them on our behalf to do the same. We may process them using third-party infrastructure and service providers acting for us, and we may publish or share them, or models and statistics derived from them, in deidentified or aggregate form.

Because we cannot identify you from these records, requests to access or delete personal data cannot be fulfilled against them, and we may keep and use them indefinitely, including after you stop playing. For the same reason, we cannot exclude a particular person from future collection or confirm whether any given record came from you. The Game has no setting to turn this off. If you would rather not contribute gameplay records, you can play the offline and single-player modes, which send us nothing.

This applies to sessions beginning on or after July 24, 2026. These server-side records are separate from the match logs stored on your own device, and the in-game logging setting controls only those local files.

Website Visitors

Our website (agari.app) is served by Cloudflare. As with any website, your device's IP address is present in transit and may appear in standard request logs kept by our hosting and content delivery provider for security and operational purposes. We do not use cookies, analytics services, or tracking technologies on the website, and we do not build profiles of visitors.

Legal Disclosure and Business Transfers

We may access, preserve, or disclose information we hold, including connection logs, where we believe in good faith that doing so is required by law, legal process, or a valid governmental request, or is reasonably necessary to investigate suspected fraud or abuse, to enforce our Terms of Service, or to protect the rights, property, or safety of our users, the public, or us.

If the Game or its assets are sold or transferred to someone else, information we hold may transfer with them, subject to this Privacy Policy.

2. Information We Do NOT Collect

We want to be clear about what we do not do:

• We do not operate user accounts of our own or require you to register with us. On some platforms the Game uses that platform's own game-service sign-in (see Section 3)
• We do not require or collect your real name, email address, phone number, or other personal contact information
• We do not collect advertising identifiers (such as IDFA or AAID), hardware fingerprints, or device identifiers from third-party advertising networks
• We do not use cookies, web beacons, pixels, or similar tracking technologies
• We do not track your activity outside of the Game
• We do not sell, rent, or share any data with third parties for advertising or marketing purposes
• We do not use third-party advertising or cross-app analytics services (such as Google Analytics, Firebase, or similar). Platform services the Game relies on (Section 3) may collect information under their own policies

3. Third-Party Platforms

The Game is distributed through third-party platforms including Steam (Valve Corporation), the Apple App Store (Apple Inc.), and Google Play (Google LLC). These platforms may collect information about you in accordance with their own privacy policies. We do not control and are not responsible for the data practices of these platforms.

Syncing across your devices. The Game may keep a copy of some of its data, such as your statistics and Daily Wall results, together with the random installation ID of the device that recorded them, in your account with the platform you play on (for example Steam Cloud, Apple iCloud, or Google Play Games), so it is available on your other devices. That copy is stored by the platform under its own privacy policy; we do not receive it and do not access it. Syncing is controlled through that platform's settings or account. Uninstalling the Game does not delete the copy (see Section 6).

Platform game services. On some platforms the Game uses the platform's own game service. On Android, this is Google Play Games Services, which may sign you in automatically with your Play Games profile; Google collects information about that use under its own privacy policy. Google may provide us with aggregate statistics that do not identify you.

Device backups. Your device's own backup service (for example iCloud Backup or Google backup) may copy the Game's locally stored data to that provider according to your device settings, under its privacy policy.

For more information, please review:

• Steam Privacy Policy
• Apple Privacy Policy
• Google Privacy Policy

4. Children's Privacy

The Game is not directed at children under the age of 13 (or such higher minimum age as required by law in your jurisdiction). We do not knowingly collect personal information from children under that age. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at the email address below, and we will take steps to delete such information.

5. Data Security

We do not maintain user accounts or store personal profiles. The limited data our multiplayer service handles is described in Section 1 and is protected in transit by TLS. We take reasonable measures to protect it, but no method of transmission or storage is completely secure. Data stored on your device is protected by your device's own security measures, and copies held by your platform (Section 3) by that platform's.

6. Your Rights

Depending on where you live, you may have rights over your personal data: to access it, correct it, delete it, export it, or restrict or object to how it is processed.

We hold very little. We keep no accounts and no profiles, and what our servers handle (mainly your IP address during a match) is transient. So in practice these rights apply mostly to the data on your own device, which you can manage or delete at any time by:

• Modifying settings within the Game
• Deleting the Game's data (on mobile, by clearing the app's data or uninstalling)
• Deleting the synced copy held by your platform, using that platform's storage or account settings. Any device that still has the Game with syncing on will upload its records again, so turn syncing off or remove the Game on each device first. We cannot access or delete this copy for you.

If you have questions about exercising your rights, please contact us at the email address below.

For European Economic Area (EEA) Residents

To the extent that we process any personal data of EEA residents, our legal bases are:

• Providing online multiplayer (Article 6(1)(b), performance of a contract): When you choose to play online, our server processes your IP address and connection metadata for the duration of your session in order to route your session's traffic between players. The game data it forwards is held only transiently in memory for reliable delivery and is not retained after your session. This processing is necessary to provide the multiplayer feature you requested.
• Security, abuse prevention, and troubleshooting (Article 6(1)(f), legitimate interest): Standard operational logs that may record connection information such as IP addresses and timestamps for no more than 30 days. Our interest is in keeping the service available and free of abuse.
• Improving the Game and developing AI (Article 6(1)(f), legitimate interest): Creating the deidentified gameplay records described in Section 1. Our interest is in improving the Game, its balance, and its AI opponents. These records are deidentified when created and are not used to identify you.
• Syncing your data across your devices: The Game writes the synced copy from your device directly to your own account with your platform (Section 3). We do not receive or process it. To the extent any of this is treated as processing by us, our basis is Article 6(1)(b), providing the sync feature you use.
• Launch-time announcement check (Article 6(1)(f), legitimate interest): The IP address necessarily present in transit when the Game retrieves the announcement file. This serves our legitimate interest in operating the Game and informing players of service status, such as scheduled maintenance, and in directing online play to an available multiplayer server. Like any web request, this IP is visible in transit to our website's content delivery network (Cloudflare).

You have the right to lodge a complaint with your local data protection supervisory authority. Where we rely on legitimate interest, you have the right to object to that processing. You may request a copy of the safeguards we rely on for international transfers by contacting us at the address below. These rights also apply, on equivalent terms, to residents of the United Kingdom and Switzerland.

For California Residents

Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know what personal information is collected and to request its deletion, and not to be discriminated against for exercising those rights. The only category of personal information our service handles is identifiers, specifically the IP address and installation ID processed transiently during a multiplayer session and the connection information in our operational logs, as described in Section 1. We do not sell or share your personal information, we do not use it for cross-context behavioral advertising, and we do not maintain accounts or profiles. The gameplay records described under "Deidentified Gameplay Data" are deidentified within the meaning of the CCPA and are not personal information. If you have questions, please contact us.

7. Data Retention

• Local device data: Retained until you modify it, clear the Game's data, or uninstall the Game.
• Copies held by your platform: Kept by that platform under its own retention rules until you delete them there; uninstalling the Game does not delete them (Section 6).
• Multiplayer server data: Not retained after your session, except as described under "Deidentified Gameplay Data" in Section 1. Your IP address is processed only for the duration of your connection; your installation ID is held in memory for your session plus about 90 seconds.
• Operational logs: Connection information such as IP addresses and timestamps, kept for no more than 30 days for security, abuse-prevention, and troubleshooting.
• Deidentified gameplay data: If collected, retained indefinitely for the purposes described in Section 1. Because these records are not associated with an identifiable person, deletion requests cannot be fulfilled against them.

8. International Data Transfers

The servers that facilitate online multiplayer are hosted in the United States by Akamai Cloud (Linode), in Los Angeles, California, with a backup server in Seattle, Washington. If you connect to the online multiplayer service, your connection metadata (IP address) is processed by the server you connect to, and, as described in Section 1, your session's game data is routed through it for the duration of your session. We do not retain the contents of this data after your session.

EEA, UK, and Swiss residents. We are established in the United States, and your game traffic reaches our server directly from your device. Our hosting provider processes data on our behalf under a data processing agreement that includes the European Commission's Standard Contractual Clauses for its own onward international transfers. If you have questions about this processing, please contact us at the address below.

Separately, the launch-time announcement check described in Section 1 is served from our website on Cloudflare's globally distributed edge network. The request, including your device's IP address in transit, may therefore be handled by a Cloudflare edge location near you, which may be located outside your home country.

Copies held by your platform (Section 3) are stored wherever that platform stores data, under its own policies.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date at the top and, where practicable, provide notice through the Game, our website, or the store or platform through which you obtained the Game (for example, a Steam announcement or patch notes). Your continued use of the Game after any changes constitutes your acceptance of the revised Privacy Policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: info@agari.app Website: https://agari.app

Ryan Sullenberger