AgarCash Privacy Policy

1. What AgarCash collects

• Google account details. When you sign in, AgarCash receives your name, email address, email-verified status and profile image from Google, plus the OAuth tokens needed to keep you signed in. AgarCash never receives your Google password.
• Your display name. The cell name you choose is public — it appears in the arena and on the AgarCash leaderboard.
• Session data. Session tokens with their expiry, plus the IP address and browser user-agent attached to the session. This is how we keep you signed in and detect account abuse.
• Wallet and payment data. The Solana deposit wallet AgarCash generates for your account, any withdrawal address you nominate, and the full record of deposits, withdrawals and ledger entries. On-chain transactions are public by nature and are not private once broadcast.
• Gameplay data. Your runs, buy-ins, outcomes, kills, cash outs and leaderboard statistics.
• Referral data. Your referral code, referral attributions, commissions, and the IP address recorded against an attribution for anti-fraud purposes.
• Support correspondence. Anything you email us.

2. Why AgarCash uses it

To run your account and keep you signed in; to operate the game and settle runs correctly; to credit deposits and process withdrawals; to run the affiliate program; to detect fraud, collusion, multi-accounting and money laundering; to meet legal and accounting obligations; and to answer your support requests.

AgarCash does not sell your personal data, and does not use it for third-party advertising.

3. Cookies

AgarCash uses two kinds of cookie, both first-party:

• Session cookies — required to keep you signed in. Without them you cannot use an account.
• Referral cookie — set only when you arrive with a ?ref= link. It is signed, HTTP-only, and stores the referral code plus the time it was captured for up to 30 days so a referrer can be credited if you sign up.

AgarCash runs no third-party advertising, analytics or tracking scripts, and does not build advertising profiles.

4. Who AgarCash shares it with

Only where necessary: Google (sign-in), our hosting and database providers, Solana network infrastructure and blockchain data providers used to verify deposits and broadcast withdrawals, and — where legally required — regulators, law enforcement or professional advisers. Blockchain transactions are permanently public and cannot be withdrawn from the network.

5. How long AgarCash keeps it

Account, ledger, deposit and withdrawal records are financial records and are retained after account closure for as long as accounting, tax and anti-money-laundering obligations require. Sessions expire automatically. Gameplay and leaderboard records are retained for the operation and integrity of the game.

6. Security

The private keys for AgarCash-generated deposit wallets are encrypted at rest with versioned envelope metadata. Access to production systems and to admin tooling is restricted and audited — administrative actions are recorded with the acting account and IP address. No system is perfectly secure, so use a strong, well-protected Google account, and remember that AgarCash staff will never ask you for a password, seed phrase or private key.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or erase your personal data, to object to or restrict processing, and to complain to a data protection authority. Write to support@agarcash.com from the email address on your AgarCash account.

Two limits worth stating plainly: we cannot erase records we are legally required to retain, and we cannot erase anything already written to a public blockchain.

8. Children

AgarCash is not for children. See the age requirement in the AgarCash Terms of Service. If we learn that an underage person holds an account, we will close it.

9. Changes and contact

Material changes to this policy will be reflected in the “last updated” date above. Privacy questions: support@agarcash.com. General support: support@agarcash.com.