Privacy Policy

Who we are

Agentale is made and run by Benjamin Loh. When this page says "we", it means him.

Questions about your data, or a request to see or delete it, go to ben@agentale.app.

Playing as a guest

You can play without an account. Your progress then stays in your own browser, in its local storage, and never reaches our servers. Clearing this site’s data in your browser erases it.

Your browser keeps:

• ✦The quests you finished, and the code you passed each one with.
• ✦The boss pieces and guide steps you finished, and the regions you skipped or tested out of.
• ✦Your hero, your companion and the name you gave it.
• ✦Settings, like sound, the last region you visited and which lesson tips you have seen.
• ✦Whether you joined the community waitlist. This holds no email address.

When you sign in

Signing in keeps your progress on our servers, so it follows you to any device. If you played as a guest first, that progress is copied into your account once.

We keep:

• ✦Your email address. If you sign in with Google, also your name and profile picture.
• ✦If you sign in with Google, your Google account id and the sign-in tokens Google sends back.
• ✦Each quest you finished, with the code you passed it with, plus the boss pieces, guide steps and regions you got through.
• ✦Your hero, your companion and its name.
• ✦If you sign in by email, a 6-digit code. It stops working after 10 minutes, and we delete it once it is used.
• ✦If you open checkout, your Stripe customer id. If you buy a plan, also the plan and its renewal date, your AI credits, and a record of each AI action you used, with the quest or boss piece, the token counts and the cost.

Your code and the AI oracle

Your Python runs inside your own browser. Our servers never run it.

Your code can reach only two places, and both are ours. The harbour is a pretend port with made-up data. The oracle is the AI that later quests teach you to call. Every other address is blocked.

Most of the time the oracle is a practice one that lives in your browser, so nothing leaves your device. The free "Hear the real oracle" button on the first AI quest plays answers we saved ahead of time, so it sends nothing to an AI company either.

Only "Ask the real oracle" sends your request out, and it costs one credit. The request your code builds goes to one AI company, OpenAI or Anthropic, which writes the answer. We send no name, email or account id with it, and we keep neither the request nor the answer. With OpenAI, we switch off its option to save the response.

So please keep anything private out of a prompt you send to the real oracle.

The community waitlist

If you join the waitlist for our learner group, we keep your email address, the app you prefer, and your account if you were signed in.

Each new sign-up sends Benjamin an alert with your address, by email and by chat. We use the address only to invite you when the group opens. Email ben@agentale.app to come off the list.

How we use it

We use your data to run the game for you. That means signing you in, saving your progress, working out your XP and badges, and taking payment if you buy a plan.

We use what Google sends us only to create and show your account.

We do not sell your data. We show no ads. We send no marketing email.

To stop abuse, we count requests per IP address, email address or account.

Third-party services

You choose when to use these three outside services. Here is what each one gets, and why. Each has its own privacy policy, linked below.

Behind the scenes, a few service providers help us run Agentale. They host the site and store its data, deliver our email, send us error alerts, and record how the app is used if we switch analytics on. A public network delivers the Python that runs in your browser, so it sees your IP address.

Some of these providers may process your data in other countries.

Cookies and browser storage

We use your browser’s local storage for guest progress and settings, as described above. If you are signed in, it also holds a copy of your progress and your account id, so the world opens fast.

If we switch analytics on, it keeps a random id in a cookie for up to a year, and a copy in local storage until you clear this site’s data.

Apart from that, we set only the cookies that signing in needs:

• ✦A session cookie that keeps you signed in. It expires after 30 days without a visit.
• ✦Cookies that protect sign-in from forgery and remember where to send you afterwards. Most go when you close your browser, and the ones Google sign-in uses expire after 15 minutes.

How long we keep it

We keep your account and progress until you ask us to delete them. There is no delete button yet, so email ben@agentale.app and we will do it for you.

Deleted data can stay in our database backups for up to 30 days.

Sign-in codes stop working after 10 minutes, and the abuse counts only matter for an hour. But each one holds the email address, IP address or account it was for, nothing deletes old ones yet, and deleting your account does not remove them. They stay in the database until we add a clean-up.

Our servers may also keep short-lived technical logs, like errors, to keep the service running.

Waitlist addresses stay until you ask to come off. Stripe keeps its own payment records, under its own policy.

Keeping it safe

Every page is served over HTTPS. Keys and secrets live only on our server, never in your browser. Your Python runs in a sandbox inside your browser, and it can reach only the harbour and the oracle.

Your choices

You can always play as a guest and give us nothing.

Email ben@agentale.app from the address on your account to:

• ✦Get a copy of everything we hold about you.
• ✦Correct something that is wrong.
• ✦Delete your account and all your progress.
• ✦Come off the community waitlist.

If you think we have mishandled your data, you can also complain to the data protection authority where you live.

Children

Agentale is made for beginners, but not for children under 13, and we do not knowingly collect their data. If you think a child under 13 has signed up, email ben@agentale.app and we will delete the account.

Changes to this page

When what we keep, or who we share it with, changes, we update this page and the date at the top.