Privacy Policy

This privacy policy applies to ARI GG ATO: the website ariggato.com, the web app (the “Hub”), our apps for iOS and Android and all games we publish. It explains which data we process, why, for how long, who receives it and what rights you have.

At a glance

• You can play without an account. In that case, all we know is a random guest ID and your game progress.
• For an account, all we need is your email address. There is no password; you sign in via a link or code sent by email.
• We don't sell data. We only personalize ads if you are 16 or older and have given your consent.
• Payments are handled by a payment service provider. We never see your card details.
• You can delete your account at any time in Settings and download your data as a file. In each game, you can also delete just your progress in that game.

1. Controller

ReDesign the System OÜ, Pärnu mnt 388b, 11612 Tallinn, Estonia
Registry code 16560505, represented by Stefan Vogel

Privacy contact: privacy@ariggato.com

We have not appointed a data protection officer because we are not legally required to do so. Our team at privacy@ariggato.com answers all privacy questions.

2. Legal bases

We only process data if a legal basis under the General Data Protection Regulation (GDPR) permits it:

• Contract (Art. 6(1)(b) GDPR): everything that is necessary so that you can play, use an account and receive your purchases.
• Legal obligation (Art. 6(1)(c) GDPR): e.g. keeping accounting records, responding to requests from authorities, obligations under the Digital Services Act.
• Legitimate interest (Art. 6(1)(f) GDPR): security, protection against fraud and abuse, troubleshooting, improving our services. In each case, we have weighed things up and concluded that your interests do not override ours. You can object (see “Right to object”).
• Consent (Art. 6(1)(a) GDPR): e.g. for personalized ads, analytics or push notifications. You can withdraw your consent at any time with effect for the future, in Settings under “Privacy settings”.

In addition, storing and accessing information on your device is subject to the rules implementing Art. 5(3) of the ePrivacy Directive (in Germany § 25 TDDDG (German Telecommunications Digital Services Data Protection Act), in Estonia the Electronic Communications Act). We store what is technically necessary without consent. Everything else we store only with your consent (see “Storage on your device”).

3. Website and servers

When you visit ariggato.com or the Hub, our server processes technically necessary data: IP address, date and time, the address requested, the amount of data transferred, browser and operating system (user agent) and the previously visited page (referrer). This is necessary to deliver the pages to you and to protect the service against attacks (Art. 6(1)(b) and (f) GDPR). We delete server logs after 7 days, unless we need individual entries for longer to investigate a specific attack.

Hosting: The website and the Hub run on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data center in Germany. Hetzner processes the data as our processor (Art. 28 GDPR).

Domain and email: Our domain and our email mailboxes are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (processor). When you write to us or we send you emails, they pass through IONOS.

We deliver fonts, images and program code from our own domain. When you visit the website or open the Hub, no data is transferred to font services or other third parties.

4. Playing, guest mode and account

Guest mode. If you play without an account, we create a random guest ID and store the following with it: a randomly generated player name (which you can replace with your own, unless we know that you are under 13), your game progress, the games you have played (first and last game, number of sessions), achievements, leaderboard scores, GG Coins, unlocked rewards and your settings (e.g. light/dark, sound). This lets you pick up where you left off (Art. 6(1)(b) GDPR). We automatically delete guest data that has not been used for 12 months. You can also delete your guest data yourself at any time: in the settings under “Delete guest data” (in apps, in the game's settings). After that you keep playing as a new guest.

Account. If you create an account, we also store your email address. We transfer your guest data to your account so that nothing gets lost. With an account, you can play on several devices and restore purchases.

Deleting game progress. In each game, you can delete your progress in that game alone, with or without an account: in the game's settings under “Delete game progress”. We then delete, for this game only, your save on our server (including backups from a fresh start), your weekly quest progress, your daily calendar entries, your season entries and all your entries in this game's leaderboards (including season, weekly and event leaderboards); the game also clears its progress on your device. Your account, purchases, GG Coins, achievements and your progress in other games remain. This is different from deleting your account, which removes your data in all games. In games with a season pass, your season points and collected season-pass rewards in that game are deleted too; a purchased pass remains.

Sign-in via email link or code. Instead of a password, we send you an email with a sign-in link and a 6-digit code. You can tap the link or enter the code where you started signing in (e.g. in the installed app). The link and code are valid for 20 minutes and can only be used once. Only the most recent email is valid; if you request a new one, older links and codes expire. A code is locked after 5 incorrect attempts. We only store cryptographic hashes of the link and code, not the link or code themselves.

Sign-in in apps and games outside the Hub. Apps and games that you don't play in the Hub (e.g. an app from the App Store or Google Play, or a game on another website) can offer sign-in with your ARI GG ATO account in the same way. Instead of a cookie, the app then receives a sign-in token, which it keeps in your device's secure storage. On our server, we only store a hash of this token, together with the game and platform it belongs to (e.g. “game/android”), so that you can sign out on one device without affecting the others. The token is valid for 180 days after its last use and ends when you sign out in the app or delete your account. Your account and GG Coins are the same everywhere; each game only stores its own game progress with your account. The legal basis is Art. 6(1)(b) GDPR.

Sign-in to your ARI GG ATO account with Google or Apple. Instead of the email code, you can sign in to your ARI GG ATO account with your Google account or your Apple ID, in the Hub and in apps and games that offer it. The same age rules apply as for every account. We only forward you to the provider when you tap the button; the Hub doesn't load any scripts from the provider beforehand. The provider then confirms your email address to us and gives us an identifier for your account there; with Apple you can hide your real address and use an anonymous relay address that forwards our emails to you. We treat the email address like one confirmed by code: if an account with this address exists, you are signed in to it; otherwise we create a new account after asking your age. We store the identifier with your account so that we recognize you next time, even if your email address with the provider changes. If the provider also sends your name or profile picture, we don't store or use them. We never see your password. Providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland; they process the sign-in as independent controllers under their own privacy policies. The legal basis is Art. 6(1)(b) GDPR. Deleting your account also removes the connection. You can also connect Google or Apple to your account later in the settings, even if a different email address is stored there, and disconnect them at any time; this only stores or deletes the identifier.

Visibility to others. On leaderboards and in the rankings, other players can see your player name, your rank and your points. Anyone who taps your name sees your player card: your profile picture, your look (frame, title, banner and up to three showcase badges) and the badges you have earned. If “Show my games to others” is switched on, the card also shows which games you have played, how many achievements you have in each game and how many GG Coins you have earned in each game; we never show when you played. From the age of 16 this setting is on by default; under 16, or if we don't know your age, it is off. You can change it at any time in Settings under “Your data”. The legal basis is Art. 6(1)(b) GDPR (the community features of the hub) and, for showing your games, our legitimate interest in a lively community in which players can compare their progress (Art. 6(1)(f) GDPR); you object simply by switching the setting off. So please don't choose a player name that contains your real name. Nobody can see your email address.

Player names. Your player name is put together at random from a list of words and a number. Instead, you can choose your own name, also in guest mode (not if we know that you are under 13); we automatically check it for links, contact details and offensive words. Please don't use your real name. Other players can report a player name. We then store the report (reason, optional note, reporting account, time) and our decision, reset names that break our rules to a random name and inform you about it (Art. 6(1)(c) and (f) GDPR, Digital Services Act). We store reports and decisions for 12 months, and delete them immediately if you delete your account.

Games in the Hub. Games run in an isolated area of the Hub and only exchange game progress, achievements, points and purchases with it. Games never receive email addresses or payment data.

Launch reminders. With an account, you can ask us on a game's page to remind you when a game that isn't available yet launches, or when it becomes available on a particular platform. We store which game and platform (Android, iOS, browser or the launch in general) you want to be reminded about and when you asked. As soon as it is available, we send you one notification in the Hub and one email to your account's email address, and note when we reminded you. Legal basis: Art. 6(1)(b) GDPR (you ask us for the reminder). You can remove a reminder on the game's page at any time. We delete it 30 days after the reminder, otherwise when you remove it or delete your account; if we merge two of your accounts, it moves to the remaining account.

Feedback on demos. On the pages of our demos and prototypes, you can send us feedback voluntarily (ratings, choices and free text). We store your answers with your guest or account ID, the game, its version, your language and the time. This lets us improve our games and prevents the same person from sending feedback several times a day or receiving GG Coins more than once (Art. 6(1)(f) GDPR; for the GG Coins Art. 6(1)(b) GDPR). We don't store your IP address with it. Please don't write personal information such as your name or contact details in the free text. We evaluate the feedback without your player name and without your email address. We delete feedback after 12 months, and immediately if you delete your account.

Ratings and reviews. If you rate a game, we store your stars, your review text (if any), its language, the date and whether you edited it, together with your account. Other visitors see your player name, your stars, your text and the date, never your email address (Art. 6(1)(b) GDPR). So that only real players can rate, we check whether your account has played the game. If someone reports a review, we store the report (reason, optional note, reporting account, time) and our decision, so that we can handle reports and complaints under the Digital Services Act (Art. 6(1)(c) and (f) GDPR). We store ratings until you delete them or your account, and reports and moderation decisions for 12 months.

Newsletter. If you have an account and are at least 16, you can subscribe to our newsletter in the settings. It tells you about new games, demos and updates, at most a few times a month. You only receive it after you have confirmed your subscription via a link in an email (double opt-in). We store your email address, your language and the times of your subscription and confirmation, so that we can prove your consent (Art. 6(1)(a) and (c) GDPR). We don't track whether you open the newsletter or click on links in it. You can unsubscribe at any time via the link in every newsletter or in the settings; we then stop sending it immediately.

Weekly challenges. Every week there are challenges across all our games, e.g. “play three different games”. To show your progress, we use the game data we already store (games played, achievements, leaderboard entries, demo feedback) and also record the days on which you played, as a date without a time. We delete these play days after three weeks. When you claim a reward, we store which challenge you completed in which week and credit the GG Coins (Art. 6(1)(b) GDPR).

Quests in games. Some games have chapters, which consist of the game's achievements, and weekly quests such as “Harvest 100 crops”. For weekly quests, the game sends your progress to our server. We store it with your guest or account ID, the game, the week and the quest, and credit GG Coins as soon as you finish a chapter or a quest (Art. 6(1)(b) GDPR). We delete weekly quest progress after eight weeks, and immediately if you delete your account.

Games on third-party platforms. Some games are currently also available on the external platforms on which they were created. If you open a game via such a link, you leave ariggato.com. The operator of that platform is then responsible for processing your data, in accordance with its own privacy policy:

• claude.ai (Anthropic, PBC, 548 Market St., San Francisco, CA 94104, USA, or Anthropic Ireland, Limited): https://www.anthropic.com/legal/privacy

We do not automatically take over game progress that is saved in your browser there. Once the games run directly on ariggato.com, this route will no longer exist.

5. Storage on your device

We only store on your device what is technically necessary for the service:

This storage is strictly necessary for the service you requested to work and does not require consent. Anything beyond that (advertising IDs, analytics) we only use with your consent. You can find the details in our Cookie and Tracking Policy: https://ariggato.com/en/cookies

6. Age check, children and teens

Our games are for everyone who enjoys games. They contain nothing unsuitable for children, but they are not directed at children under 13. We only ask for your age (month and year) when you create an account. We store the resulting age group together with the month and year of birth (never the day), so that the age group moves up by itself as you get older and we never have to ask again. When you play without an account, we do not ask for your age.

• Under 13: If we learn when an account is created that someone is younger than 13, we do not create the account, do not keep the email address entered and show no more ads on that device: no ad SDK is started and no data goes to ad partners. For the guest on that device we only keep the age group with month and year of birth, so that this ends by itself once you are old enough.
• Under 16: If we know from the account that someone is younger than 16, we only show non-personalized ads and do not ask for consent to personalized ads. We then do not read the device's advertising ID, and ad partners receive the flag for a minor.
• Account: from the age of 16. Between 13 and 16 only with parental consent. Under 13, you can only play in guest mode. We ask for your age once, when you create a new account, not every time you sign in.
• South Korea: there, an account is only available from age 14; younger players play as guests and see no ads.
• Purchases: under 18 only with parental consent. Under 16, we block purchases in the browser.
• Friends and clans: only with an account, i.e. from 13. Other players only see the player name, profile picture and look.
• Chat with friends: only between confirmed friends who are both at least 16. Younger account holders can see whether their friends are online and what they are playing, but cannot chat; their own online status is off until they turn it on.
• Clan chat: only for clan members who are at least 16; younger members only see the members and the clan ranking.

Children under 13 in the USA: We do not knowingly collect any personal information from them other than identifiers that we only use to operate the game (saving game progress, security), as permitted by the Children's Online Privacy Protection Act (COPPA). Parents who believe that we hold data about their child can write to privacy@ariggato.com. We will then delete it promptly. More for parents: https://ariggato.com/en/parents

7. Purchases

Purchases in the browser. Purchases in our browser games in the Hub are handled by Tebex Limited, 201 Haverstock Hill, Second Floor, London NW3 4QG, United Kingdom (company number 08129184). As reseller (merchant of record), Tebex is your contracting party for the payment, issues the receipt and pays the VAT. The checkout opens in a separate window on pay.tebex.io. There, Tebex processes your name, email address, country, postal code, payment data, IP address and device data and uses cookies in the checkout window, as an independent controller, including for fraud prevention and to meet its tax obligations. Contact for your data protection rights: Tebex Limited (address above), https://www.tebex.io/legal/privacy. To open the checkout, we send Tebex the email address of your account, our order number, the game and the product with its price (Art. 6(1)(b) GDPR) as well as your IP address for fraud prevention (Art. 6(1)(f) GDPR). For the United Kingdom, an adequacy decision of the European Commission applies (see “Recipients and transfers to third countries”). From Tebex, we only receive the transaction number, status, amount, tax, currency, the purchased product and our order number, so that we can unlock the purchase in your account and take refunds and chargebacks into account. Before opening the checkout, our server determines the country from your IP address, using a country list (DB-IP) stored on our server; your IP address is not passed on for this and the country is not stored. In some countries we don't offer purchases in the browser (Art. 6(1)(c) and (f) GDPR).

Purchases in the apps. In the apps, you buy through Apple's App Store or Google Play. Apple or Google processes the payment as an independent controller. After a purchase and when you restore purchases, the app sends us the store's proof of purchase: from Apple, the transaction signed by Apple, whose signature we check ourselves; from Google, the purchase token, which we send to Google (Google Play Developer API) for checking. With your account or guest ID, we store the game, store, product, type (permanent, consumable or subscription), status, purchase time, expiry of subscriptions and the store's transaction number, so that the purchase is unlocked on all your devices, cannot be used by several accounts and refunds are taken into account (Art. 6(1)(b) GDPR). We keep this data until your account or guest data is deleted; it is included when you download your data.

In your account, we store your orders, purchased content and inventory (Art. 6(1)(b) GDPR). We keep accounting-relevant data for 7 years because the Estonian Accounting Act requires it (Art. 6(1)(c) GDPR).

8. Ads

Some games are free and financed by ads: banners, interstitial ads between levels and optional rewarded videos (“Watch a video for a reward”). Ads are always clearly recognizable as ads. Where a “No ads” purchase is available, it removes interstitial ads.

Without consent (and always for players under 16), everyone only sees non-personalized ads. For this, ad partners process technical data such as your IP address (truncated), device type, operating system, language, approximate region and app version in order to deliver ads, detect fraud and count impressions. The legal basis is our legitimate interest in financing free games (Art. 6(1)(f) GDPR); for this purpose, they only access your device to the extent strictly technically necessary.

With consent (from the age of 16), ad partners may also use your device's advertising ID (Advertising ID or IDFA; on Android also the App Set ID) and cookies to tailor ads to your interests and to measure ad performance (Art. 6(1)(a) GDPR). On iPhone and iPad, the system also asks you whether the app may track you across other companies' apps (App Tracking Transparency).

Managing consent. We obtain consent through a consent window that uses IAB Europe's “Transparency & Consent Framework” (TCF) standard. There you can see all ad partners and purposes and choose individually. You can change or withdraw your choice at any time in the app under Settings → Privacy settings, as well as in your device settings (iOS: Privacy & Security → Tracking, Android: Settings → Privacy → Ads). The consent window is provided by the Google User Messaging Platform (Google Ireland Limited, Ireland); it stores your choice on the device and passes it on to the ad partners.

Unity Ads: Unity Technologies ApS, Niels Hemmingsens Gade 24, 1153 Copenhagen, Denmark, and Unity Technologies SF, 30 3rd Street, San Francisco, CA 94103, USA. Unity delivers and measures ads. In doing so, Unity acts as an independent controller: https://unity.com/legal/game-player-and-app-user-privacy-policy

Unity LevelPlay (mediation): Unity Technologies or ironSource Ltd., 121 Menachem Begin Rd., Tel Aviv, Israel. LevelPlay decides which ad network delivers an ad and passes your consent decision on to all networks. An adequacy decision of the European Commission applies to Israel. The connected ad networks and their privacy policies: https://developers.is.com/ironsource-mobile/general/ironsource-mobile-partners/ and in our consent window. LevelPlay includes the Unity Ad Quality SDK: it checks displayed ads for errors, fraud and prohibited content and sends information about the ad and technical device data (device type, operating system, app version, truncated IP address) to ironSource.

Google AdMob: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google delivers and measures ads. For personalized ads, Google acts as an independent controller; data may be transferred to Google LLC in the USA. How Google uses data from apps: https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy

Ads in browser games (Google AdSense). Some browser games on ariggato.com show ads between levels and optional bonus videos. We do not ask for your age for this; the rules in section 6 apply: if you tell us when creating an account that you are under 13, you will no longer see ads on that device, and under 16 ads are never personalized. The ads are delivered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google AdSense). When an ad is loaded, Google processes your IP address and device and browser data and, only with your consent, cookies and similar identifiers to personalize ads and measure their performance. Players from the EEA, the United Kingdom and Switzerland first see Google's certified consent window (IAB TCF); you can change your choice at any time via “Privacy settings” in Settings under “Your data” or in the footer of the page (Art. 6(1)(a) GDPR; without consent only non-personalized ads, based on our legitimate interest in financing free games, Art. 6(1)(f) GDPR). Players in US states with corresponding laws can object to the sale or sharing of their data for advertising via “Do not sell or share my personal information” (in Settings and in the footer). Google acts as an independent controller and may transfer data to Google LLC in the USA (EU-US Data Privacy Framework). How Google uses data: https://policies.google.com/technologies/partner-sites

We publish the file app-ads.txt on ariggato.com. It discloses which ad networks are authorized to sell ads in our apps and protects against ad fraud.

9. Analytics, crash reports and push notifications

We don't use any third-party analytics tools. We only see how often games are played from our own server's data (see “Playing, guest mode and account”), in aggregated form and without looking at you individually.

Playtime statistics in the hub. So that we can see which games people enjoy and where we need to improve, the hub measures how long a game is open in the hub while the tab is visible: about once a minute and when you leave, it sends the seconds played to our server. For each opened game we store your guest or account ID, the game, the day, the start time and the playtime (at most 6 hours per game and day), as well as on which days you played which game. From this we only calculate aggregated figures, e.g. the average playtime or how many players come back the next day or after a week. We do not look at you individually, do not create profiles and do not share the data with anyone. No additional cookies are set, no IP addresses are stored and no third parties are involved; the data is linked via your existing sign-in (cookie agg_session). The legal basis is our legitimate interest in improving our games (Art. 6(1)(f) GDPR). We delete sessions and play days after 90 days, and immediately if you delete your account; only daily totals per game without reference to any person remain. You can object at any time: turn off “Playtime statistics” in Settings under “Your data”, and we will no longer measure anything for you.

Automated visits. So that search engine crawlers, link previews and automatically controlled browsers do not distort our figures, our server checks, when a guest profile is created or the Hub or a game starts, whether the browser identification (user agent) belongs to such a program or whether the browser reports that it is being controlled automatically. If so, we only note “automated access” with the guest profile; such visits are then not counted in our statistics. We do not store the browser identification itself. The note is removed when an account is created from the guest profile and is deleted together with the guest data. The legal basis is our legitimate interest in accurate statistics (Art. 6(1)(f) GDPR).

Error reports from games. So that we can find and fix bugs, our games (in the browser and in our apps) send our server a technical report when an error occurs: the error message and the technical call sequence (stack trace), the game version, the platform (browser, iOS, Android), the operating system and browser family (e.g. “Android”, “Chrome”, without version numbers), the SDK version and whether the game was played with an account or as a guest. No account or guest ID, no IP address and no device identifiers are stored with it; email addresses, access tokens and parameters in web addresses are removed from the report before it is sent. Identical errors are only counted. Only ARI GG ATO and the team developing the game can see the reports. The legal basis is our legitimate interest in games that run without errors (Art. 6(1)(f) GDPR). We delete the reports 90 days after the error last occurred.

Game analytics. So that we and the team developing a game can see how it is played and where it needs improving, our games (in the browser and in our apps) send our server usage events: when a game session starts, how long the game is visible, events the game defines itself (e.g. “level 3 completed” or “shop opened”, with up to 10 short values such as a level number – never names, email addresses or text you type) and when an ad was shown; our server itself records purchases (without amounts), achievements and quests. We do not store your account or guest ID with this, but a key derived from it that is different for every game, so your use of different games cannot be linked. We also store the day and time, the platform (browser, iOS, Android), the game version and the country determined from your IP address; the IP address itself is not stored. No advertising ID or device identifier is used, nothing is stored on your device for this purpose, and the data is not used for advertising, for profiles or for decisions about you and is not passed on to third parties. ARI GG ATO and the team of the game only see aggregated figures (e.g. how many players come back after 7 days); groups of fewer than 10 players are not shown. If you are under 13 (as stated when creating an account or guest profile) or play without a session, we only count events anonymously. The legal basis is our legitimate interest in improving our games (Art. 6(1)(f) GDPR). We delete individual events after 90 days, play days per game after 90 days and the key with your first and last day of play 13 months after you last played; only daily totals per game without any reference to a person remain (25 months). If you delete your account or guest profile, we delete this data immediately. You can object at any time: turn off “Playtime statistics” in Settings under “Your data” (this applies to all games and apps you play with this account), or write to privacy@ariggato.com.

The events reported by our games and their built-in functions also include which screens of a game you open and for how long, the steps of a purchase (started, cancelled or failed – without amounts), whether an offered ad was watched to the end, and from which source you came to the game (for example an ad network, a link or the store itself). For the source we only store this classification and, where available, the name of the campaign – never a click ID or an advertising ID. In Android apps the classification is derived on your device from the information Google Play provides about the installation; where our consent window applies (for example in the EU), this only happens if you have agreed there to information on your device being accessed. Everything said above applies to these events as well.

Page counters in the hub. So that we can see which pages of the hub are used and where visitors leave, the hub reports to our server which page was opened, which page you came from, how many seconds the previous page was visible and – for your first page – from what kind of site you arrived (for example a search engine, a social network or a link with a campaign tag). We only increase daily counters per page with this: we store no account or guest ID, no IP address and no cookie for it, and nothing is stored on your device. The counters cannot be traced back to you. If you turn off “Playtime statistics” in Settings under “Your data”, your visits are not counted. We keep the daily counters for 25 months. The legal basis is our legitimate interest in improving the hub (Art. 6(1)(f) GDPR).

Creator codes. If you enter a creator code, we store the code and the time you entered it together with your account or guest ID for 30 days (entering it again extends this period). Purchases you make during this time are marked with the creator in our purchase records – without your name or ID. The creator only receives aggregated monthly figures (number of purchases, revenue, commission), never information about you. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR), because you choose to support the creator. After 30 days, or as soon as you remove the code, the link to your account is deleted; the marking of the purchase stays with the purchase records for as long as we have to keep them for accounting.

Events and daily calendar. Our games can run time-limited events. If an event has its own leaderboard, we store the scores you reach during the event in a separate event leaderboard, just like normal leaderboards (other players see your player name, rank and points); rewards for your place arrive in the game’s mailbox after the event. If a game has a daily calendar, we store for each reward you claim: the game, the round and day of the calendar, the calendar day and the time. To work out your calendar day, your device sends its time zone; we don’t store it. We need this so that each day can only be claimed once and we can show you which days you have already claimed. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR). We delete entries in event leaderboards 12 months after the event ends, calendar entries of a completed round after 90 days, and all calendar entries of a game 12 months after you last claimed a reward there – and in any case when you delete your account.

Season pass. If a game offers a season pass, we store for each season of that game your season points (with the points of the current day for the daily limit), which tiers you have collected on which track and when, whether you bought the pass for that season and in which way (browser order or app store purchase, without payment details) and – without any reference to you – totals of where the points came from. We need this to show your progress, to credit every reward exactly once, to send rewards you have not collected to the game's mailbox after the season ends and to take refunds into account. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR). We delete season points and collected tiers 12 months after the end of the season, and in any case when you delete your account; the purchase of a pass is kept like your other purchases.

Push notifications in our apps. Some of our apps let you turn on push notifications in the game’s settings (e.g. “The autumn event has started”). Only when you turn them on there and allow notifications in your device’s system dialog does your device create a push token. We then store the token together with the game, the platform (iOS or Android), on iOS the app identifier and whether it is a test or store version, your language, your device’s time zone (so that we don’t send anything between 9 pm and 9 am), the app version, your guest or account ID, when you turned push on, when a message was last delivered and when you last received a message from that game (for the daily limit, see below). The legal basis is your consent (Art. 6(1)(a) GDPR; for the token on your device also § 25(1) TDDDG or the corresponding rules implementing Art. 5(3) of the ePrivacy Directive). Push notifications are only available from age 16; under 16, there are none, not even for accounts created with parental consent.

Automatic notifications. If you have turned push on, a game can also notify you automatically when something happens for you: a new friend request or an accepted request, a new message or gift in the game’s mailbox, the start of an event, your daily reward being ready again, or when you haven’t played for a few days. For this we use data we already process for the respective feature (friend list, mailbox, events, daily calendar, when you last played) and keep a note of which automatic notification we sent you and when (deleted after 60 days). You decide per game which kinds you want (“Friends”, “Gifts & mail”, “Events & news”, “Reminders” – reminders stay off until you turn them on), in the game’s settings or in the hub under Settings → “Push in our apps”. The messages never contain names of other players. Per game and day we send at most one general and two personal notifications, never between 9 pm and 9 am. The legal basis is your consent (see above).

On iPhone and iPad, messages are delivered by the Apple Push Notification service (Apple Inc., USA, and Apple Distribution International Ltd., Ireland), on Android by Firebase Cloud Messaging (Google Ireland Limited, Ireland, and Google LLC, USA). We use Firebase only for this delivery: our apps contain no Firebase Analytics and no Crashlytics, and Firebase only creates a token when you turn push on. The service receives the push token, the message (title, text, game, number of the message and, if applicable, a screen in the game – no information about you), technical data of the app installation and your IP address. Apple and Google also process data in the USA and are certified under the EU-US Data Privacy Framework (section 14).

You can turn push notifications off at any time in the game’s settings, in the hub under Settings → “Push in our apps” or in your device’s settings. We delete the token immediately when you turn push off or delete your account, when Apple or Google report it as invalid, and when deliveries have failed for 30 days. The messages themselves (text, audience, number delivered) contain no personal data; we keep them for 12 months.

Updates of app content. Our apps can receive new game content (e.g. texts, images, levels, bug fixes) from our server without an update through the app store. For this, the app asks our server after starting whether there is new content for its version, sending the game, the platform, the app version and the number of the content it currently uses; if you are signed in, the request is made with your sign-in token, which we only use to give versions that are still being tested to our team and to spread new content evenly over time (each account gets it at a fixed point within a few minutes to hours; nothing is stored for this). New content is only downloaded from our server and checked with a digital signature before use. Whether new content started correctly or the app had to go back to the previous one, the app reports to us without any identifier; we only store these counts per day. Your IP address is processed for the connection as with any access to our server. The legal basis is our legitimate interest in up-to-date and error-free games (Art. 6(1)(f) GDPR).

Push notifications in the browser. In the hub, you can turn on push notifications for each device in Settings under “Notifications” and choose topics: “New weekly challenges” (at most once a week), “New games & demos” and “Events & news”. We never ask as soon as you open a page; at most every 30 days we offer it to you after a fitting moment (e.g. when you have claimed a challenge). Only when you agree and your browser grants permission does it create a push subscription. We then store the address of the push subscription and the keys your browser creates for it, the topics you chose, your language, your device’s time zone (so that we don’t send anything between 9 pm and 9 am), your guest or account ID and when you turned it on and when a message was last delivered. The legal basis is your consent (Art. 6(1)(a) GDPR; for the push subscription on your device also § 25(1) TDDDG or the corresponding rules implementing Art. 5(3) of the ePrivacy Directive). Push notifications are only available from age 16: only accounts and guests aged 16 or older can turn them on (for guests, the age they have stated counts). Under 16, there are no push notifications, not even for accounts created with parental consent.

Messages are delivered by the push service your browser uses: Firebase Cloud Messaging (Google) for Chrome, Opera, Samsung Internet and Edge on Android, Mozilla’s push service for Firefox, the Apple Push Notification service (Apple) for Safari and all browsers on iPhone and iPad, and the Windows Push Notification Services (Microsoft) for Edge on Windows. The service receives the address of the push subscription, the message (encrypted, only your browser can read it), how long it is valid and technical connection data; it also receives your IP address from your browser, which is connected to it. The messages only contain a title, a text and a link to ariggato.com, no information about you. The providers also process data in the USA; Google, Apple, Microsoft and Mozilla are certified under the EU-US Data Privacy Framework (see “Recipients and transfers to third countries”).

You can turn off push notifications at any time in Settings under “Notifications” (individual topics or completely) or by withdrawing the permission for ariggato.com in your browser’s site settings; signing out also ends push on that device. We delete the push subscription immediately when you turn it off or delete your account, when the push service reports that it is no longer valid, and when deliveries have failed for 30 days.

10. Friends, online status, chat, invitations and shared links

Friends. With an account (from age 13) you can add other players as friends: from their player card, with your personal invite code or link, or through a link shared from a game. A friendship only exists once the other person accepts the request. We store who sent a request to whom and when, when it was accepted and whom you have blocked, and we show a notification in the Hub (for example “… wants to be your friend”). Only you see your friends list. Your friends see your player name, profile picture and look – the same as all players in the rankings – and can compare scores with you in “Friends” rankings. You can remove friends, withdraw or decline requests and block players at any time. Legal basis: Art. 6(1)(b) GDPR (you use the feature). We delete friendships, requests, blocks and your invite code when you delete your account; if we merge two of your accounts, they move to the remaining account.

Inviting friends. Your account has a personal invite code; links to the Hub or to a game can contain it (for example https://ariggato.com/g/[game]?ref=[code]). If someone new opens such a link, we store with their guest data or new account which code invited them and from which game. If they create an account and actually play (the account is at least 24 hours old, they have played on two different days and unlocked an achievement or played for 30 minutes, all within 30 days), both receive GG Coins and, if the game offers it, a gift in the game's mailbox; the inviting person sees a notification with the new player's name. GG Coins are never money and cannot be bought. To prevent abuse, for example inviting one's own second accounts, we compare a keyed hash of the new player's IP address with that of the inviting person when they last opened their invite link, and the Hub or the app tells us whether the inviting account was used on the same device. We never store the IP address itself, only the hash, for 90 days. If there are signs of abuse, a person on our team checks the invitation before anything is rewarded. An inviting person receives at most 10 rewards per month. Legal basis: Art. 6(1)(b) GDPR (the invitation programme you take part in) and Art. 6(1)(f) GDPR (our legitimate interest in preventing abuse). We delete invitations of guests who do not create an account after 30 days; invitations without the required play expire after 30 days. Otherwise we keep the invitation until the account is deleted; if the inviting person deletes their account, the invitation remains without any reference to them.

Shared links. If you share a link from a game, it contains your invite code (if you have an account) and, if the game provides it, a short piece of game information (for example a level). Whoever opens the link sees a preview with the title and image of the game, and the game receives this information in the browser or the app. On phones, the link opens the game's app if it is installed; for this, Android and iOS check a file on our server that only lists the apps. We do not store who opened a link, apart from an invitation as described above. Sharing uses your device's share function; we do not learn with whom you share the link.

Online status. Your friends can see whether you are online in the Hub, away (the Hub is open in the background) or playing a game, and which game. Only confirmed friends see this, never other players. While the Hub or one of our games is open, it reports this to our server about once a minute: a random identifier for the browser tab or app start, whether it is in the foreground or background, and the game. We do not store this in a database but keep it only in the server's working memory and forget it at the latest 3 minutes after the last report (or when the server restarts). You can turn your online status off at any time (Settings or friends list: “Show my online status”); you then appear offline to all friends but still see their status. If you are under 16, it is off until you turn it on. Legal basis: Art. 6(1)(b) GDPR (you use the feature).

Chat with friends. Confirmed friends who are both at least 16 can send each other text messages (up to 500 characters, no pictures or files) in the Hub and in games that offer the chat (the same chats, always through our server). We store the sender, the recipient, the text and the time of each message and the last message you have read, so that your chats are available on all your devices; we do not show read receipts to the other person. Messages are transmitted encrypted (HTTPS) and stored on our servers; they are not end-to-end encrypted. Nobody on our team reads chats. An automated check only rejects messages containing words from our list of insults; we do not otherwise analyse messages, do not use them for advertising and do not create profiles. Links in messages are shown as plain text and are not clickable. To protect against spam, we limit how many messages can be sent in a short time. Legal basis: Art. 6(1)(b) GDPR.

Reports in the chat. You can report any message you receive. We then store a copy of the reported message, up to five messages before it as context, the reason and your note; only this is seen by the person on our team who reviews the report, never the whole chat. The person you reported does not learn who reported them. If we remove a message, both of you only see a placeholder, and the author receives a statement of reasons. Legal basis: Art. 6(1)(c) GDPR (Digital Services Act) and Art. 6(1)(f) GDPR (protecting our users).

How long we keep chats. Messages are kept until they are deleted – there is no automatic expiry. You can delete a chat for yourself at any time; the other person keeps their copy. Once both have deleted a chat, it is deleted from our server. If a friendship ends or someone is blocked, the chat remains readable for both, but no new messages can be written. If you delete your account, we delete all chats of your account, including the other person's messages in them, because the chat no longer has a counterpart. If we merge two of your accounts, your chats move to the remaining account; the backup copy of the merge does not contain any messages. Messages removed by moderation are deleted after 7 months (unless a complaint about them is still open); reports and decisions after 12 months.

11. Clans

In games that offer clans, you can found or join a clan with an account (from age 13). We store the clan's name, its members and their roles (leader, officer or member), when they joined and the clan's settings, and we calculate the clan ranking from the members' leaderboard scores. Clan names, the names of the members, their roles and contributions and the clan ranking are visible to all players, also on the clan's page in the Hub (https://ariggato.com/clan/[game]/[clan]), which anyone can open without an account. Anyone can report a clan name. We handle reports like reports of player names: after reports from several players, a name may be replaced automatically by a neutral name; the clan leader is informed with the reasons and can object. Legal basis: Art. 6(1)(b) GDPR, for moderation Art. 6(1)(c) GDPR (Digital Services Act). We keep reports and decisions for 12 months. If you delete your account, you leave all clans; the leadership passes to the officer (otherwise the member) who has been in the clan the longest, and a clan without members is deleted.

Clan chat. Every clan has a group chat for its members who are at least 16 – on the clan's page in the Hub, in the friends list and in games that offer the chat. Younger members do not see it. We store the sender, the text and the time of each message and the last message you have read. All members aged 16 or over can read the messages, including messages written before they joined; members who leave or are removed lose access immediately, but their messages remain visible with their player name. Links, email addresses, phone numbers and words from our list of insults are rejected automatically; we do not otherwise analyse messages, do not use them for advertising and do not create profiles. Messages from players you have blocked are hidden for you. You can delete your own messages; the clan leader and officers can remove other members' messages and remove members. Nobody on our team reads clan chats. Legal basis: Art. 6(1)(b) GDPR.

Reports in the clan chat. You can report any message from another member. We then store a copy of the reported message, up to five messages before it with the names of their authors as context, the reason and your note; only this is seen by the person on our team who reviews the report. The person you reported does not learn who reported them. If we remove a message, all members only see a placeholder, and the author receives a statement of reasons. Legal basis: Art. 6(1)(c) GDPR (Digital Services Act) and Art. 6(1)(f) GDPR (protecting our users).

How long we keep the clan chat. Messages are kept until they are deleted – there is no automatic expiry. If a clan is dissolved (the last member leaves), its chat is deleted. If you delete your account, we delete your messages in all clan chats. If we merge two of your accounts, your messages move to the remaining account. Messages removed by moderation are deleted after 7 months (unless a complaint about them is still open); reports and decisions after 12 months.

12. Support, reports and contact

When you write to us, we process your message, your email address and, where necessary, data about your account and your purchases in order to handle your request (Art. 6(1)(b) or (f) GDPR). We delete support requests two years after they are closed, unless we are required to keep them longer. For requests through our support form (https://ariggato.com/help, in our games under Help & Support) we store the topic, subject, your messages, the game, platform, app version and device (model and operating system) as well as our replies; for accounts we use your account email address for confirmations and replies. Guests read our replies only in the Hub or the game. Internal notes of our team stay with us. If you ask us to merge two of your accounts, we move the data of one account into the other (Art. 6(1)(b) GDPR); the other account can no longer be used, and signing in with its email address, Google or Apple then leads to the merged account. We keep a copy of the moved data for 90 days so that we can undo the merge; it is deleted earlier if you delete your account.

We handle reports of illegal content and complaints about moderation decisions in accordance with the Digital Services Act (Art. 6(1)(c) GDPR). We do not pass on the name and email address of the person who made a report to the person reported.

Moderation of accounts. If we suspend an account, we store the reason, the category, the period and our decision and, if you object, your complaint and how we decided on it. Every action our moderation team takes in our admin tool (e.g. hiding a review, resetting a player name, suspending an account, deciding on a complaint) is logged with the person who took it and the time. Legal basis: Art. 6(1)(c) GDPR (Digital Services Act) and Art. 6(1)(f) GDPR (our legitimate interest in fair, traceable moderation and in protecting our users). We delete suspensions and complaints 12 months after the suspension has ended or the complaint has been decided, and the log after 3 years. If you delete your account, we delete your complaints and suspensions immediately; log entries remain, but pseudonymised.

13. Our social media presence

We have profiles on Instagram, TikTok, YouTube, X, Facebook, LinkedIn, Twitch, Discord and Bluesky. When you visit our pages there, the operators process your data in accordance with their own privacy policies. For our Facebook and Instagram pages, we are joint controllers with Meta Platforms Ireland Limited for the page insights (Art. 26 GDPR); the essence of the arrangement: https://www.facebook.com/legal/terms/page_controller_addendum. It is best to exercise your rights directly with the respective operator, but we are happy to help: privacy@ariggato.com. We only receive aggregated statistics from the networks and the messages you send us.

Our bot on Discord: If you use the buttons or menus of our ARI GG ATO bot on our Discord server (for example “I accept the rules” or choosing games and notifications), Discord sends us your Discord user ID, your current roles on our server and the options you selected, so that we can assign or remove the matching roles. We don't store this data. Your user ID is only kept briefly and in pseudonymised form in memory to protect against abuse (limiting the number of clicks) and is deleted after a few minutes at the latest. Legal basis: Art. 6(1)(b) GDPR (you ask us to assign the roles) and Art. 6(1)(f) GDPR (our legitimate interest in a safe, well-organised community and in protection against abuse).

14. Artificial intelligence

We use AI tools to develop games, graphics and texts. We do not enter any personal data of our players into these tools. If you talk to an AI character in a game, we will tell you beforehand.

15. Recipients and transfers to third countries

Your data is only received by the service providers named in this policy, and only to the extent they need it for their task. Processors are contractually bound by our instructions (Art. 28 GDPR). Authorities only receive data if we are legally required to provide it.

Some service providers are based in the USA or process data there. For the USA, the European Commission determined on 10 July 2023 that companies certified under the EU-US Data Privacy Framework provide an adequate level of data protection (Art. 45 GDPR). Where a service provider is not certified, we have concluded the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) and assess additional safeguards. You can obtain a copy of these safeguards from privacy@ariggato.com. For the United Kingdom, Switzerland and Israel, adequacy decisions of the European Commission apply.

16. How long we store data

17. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and withdrawal of any consent you have given (Art. 7(3)). You can do much of this directly in the app: under Settings, you'll find “Download my data” and “Delete account”. For everything else, an email to privacy@ariggato.com is enough. We reply within one month. To protect your data, we may ask you to confirm your request via your account's sign-in link or code.

18. Right to object

You can object at any time, on grounds relating to your particular situation, to processing that we base on our legitimate interest (Art. 21(1) GDPR). We will then no longer process the data for that purpose, unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defense of legal claims. You can object at any time, without giving reasons, to advertising based on your data (Art. 21(2) GDPR). To do so, write to privacy@ariggato.com or use the Privacy settings in the app.

19. Complaint to a supervisory authority

You can lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. The authority responsible for us is: Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), Tatari 39, 10134 Tallinn, Estonia, www.aki.ee.

20. Automated decisions

We do not make any decisions based solely on automated processing that produce legal effects concerning you (Art. 22 GDPR). Automated filters may temporarily hide content; decisions on account suspensions are always made by a human.

21. Do you have to provide data?

To play in guest mode, we don't need any information from you. For an account, we need your email address; otherwise we can't send you a sign-in link or code. Consent is voluntary; without it, all games work exactly the same, just without personalized ads.

22. Security

We transfer all data in encrypted form (HTTPS/TLS), store sign-in links, sign-in codes and sessions only as hashes, technically separate games from the Hub, restrict access to data to a small number of people and back up the database daily in encrypted form.

23. Additional information for California and other US states

If you live in a US state with its own privacy law (e.g. California, Colorado, Connecticut, Virginia, Utah, Texas), the following also applies: We collect the categories of personal information listed in this policy (identifiers such as email address, guest ID and IP address; purchase data; usage data in our games; approximate region; advertising IDs if you consent) for the purposes stated. We do not sell personal information for money. If ad partners use advertising IDs for personalized advertising, this may count as “sharing” under California law. You can opt out via the “Do Not Sell or Share My Personal Information” link in the app and on ariggato.com; we also treat a Global Privacy Control (GPC) signal from your browser as an opt-out. You have the right to access, delete and correct your data and to opt out, without being discriminated against for doing so. Requests: privacy@ariggato.com. We do not sell or share the data of anyone under 16.

24. United Kingdom and Switzerland

For users in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply, with the same rights; you can lodge complaints with the Information Commissioner's Office (ico.org.uk). For users in Switzerland, the Swiss Federal Act on Data Protection (FADP) also applies; the competent authority is the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

25. Changes

When we introduce new features or laws change, we update this policy. We announce significant changes in the app before they take effect. The current version is always available at https://ariggato.com/en/privacy.

Last updated: 14 November 2026