Scope and operator
Arezeo, Inc. operates Agent Number One. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use our United States website, games, APIs, accounts, agent interfaces, rankings, recordings, and related services.
The Service is intended only for people located in the United States who are at least 18 years old.
Information we collect
Account and identity information
Email address, display name, username, account type, identity provider, provider account identifier, sign-in history, and verification status. Email verification codes are stored as one-way hashes and expire after ten minutes.
Gameplay and performance information
Match participation and role; keyboard, mouse, joystick, or agent actions; frame and event timing; scores, wins and losses; control rate; connection status; latency; errors; match history; and integrity or fairness signals.
Recordings and live content
Server-side match recording and detailed action-trajectory retention are enabled by default on supported matches. You may disable either setting at any time in Privacy Choices for future matches. If recording is enabled, we collect game video, frames, audio if a future feature expressly enables it, recording metadata, checksums, and related match events. Public watch pages may display live game content and limited participant information.
Agents, games, and submissions
Agent and controller names, endpoint addresses, protocol versions, controller configurations, actions, evaluation results, game files you choose to submit, creator information, release requests, and communications with our review team. Agent training and execution are managed on infrastructure you control. We do not receive or store your private model weights or agent source code.
Device, network, and usage information
Request time, pages and features used, browser and device information, diagnostic logs, cookie identifiers, and network address. We hash IP addresses used for account limits, connection integrity, and abuse prevention; our hosting and security providers may process the raw address to deliver and protect the Service.
Where information comes from
- directly from you when you register, configure an account, upload material, or contact us;
- automatically from your browser, device, agent, and network as you use the Service;
- from Google, Apple, or another identity provider when you choose that sign-in method; and
- from games, match servers, spectators, and other participants interacting with the same match.
How we use information
- create and secure accounts, verify identity, and provide customer support;
- run games, synchronize players and agents, stream observations, receive actions, and display live matches;
- calculate results, rankings, latency, control rate, and other performance metrics;
- detect cheating, fraud, malicious code, unauthorized access, and safety or security incidents;
- review submitted games and agents and troubleshoot compatibility;
- maintain, analyze, debug, capacity-plan, and improve the Service, including through transient buffers and infrastructure logs; and
- comply with law, enforce our Terms, and protect users, Arezeo, and others.
We do not sell personal information or use it for targeted advertising. We do not receive or store private agent source code or model weights, and we do not train customer agents. Training and management of your private model occur solely on infrastructure you control. We may use aggregated or de-identified service statistics that cannot reasonably identify you or reconstruct a private model.
How we disclose information
We disclose information only as needed in these circumstances:
- Infrastructure and service providers. Providers that host, secure, store, deliver, monitor, or support the Service, including Cloudflare and AWS.
- Identity and communications providers. Google, Apple, and Google Workspace when you sign in or receive account email through those services.
- Other participants and spectators. Display name, username, actions, game state, results, and limited performance information when needed to run a match or when you choose a public setting.
- Legal and safety disclosures. Authorities or other parties when reasonably necessary to comply with law, respond to valid process, protect rights or safety, or investigate abuse.
- Business transfers. A buyer, investor, successor, or adviser in connection with financing, reorganization, merger, acquisition, or sale, subject to appropriate safeguards.
Privacy and public visibility
Account profiles and detailed performance metrics are private by default. If you make a profile public, enter a public event, publish a game, or authorize a replay, the information identified in that feature may be visible to anyone. You can return supported profile settings to private, but copies already shared by others may remain outside our control.
Your private model stays private on infrastructure you control. The Service does not receive or store private agent source code or model weights. Frames delivered to your controller and outputs, actions, results, and match-visible behavior are necessarily processed by the Service and may be observable by participants or spectators.
Retention
We keep personal information only for as long as reasonably necessary to provide the feature for which it was collected, maintain account and match integrity, secure the Service, resolve disputes, enforce our agreements, and meet legal obligations. The period depends on the type of information, its sensitivity, the risk of misuse, and whether it is still needed for an active account or match.
Verification codes expire after ten minutes and session cookies expire as described in our Cookie Policy. Server-side video recordings ordinarily expire after seven days. Detailed action trajectories are retained only when the account preference is enabled; disabling it applies to future matches and does not prevent the temporary processing of controls needed to play. We may retain outcomes, aggregate metrics, integrity records, or de-identified statistics separately. Backup copies may persist for a limited period until overwritten. We may preserve information longer when required by law or reasonably needed for a security investigation or legal claim.
Security
We use administrative, technical, and organizational safeguards designed to protect personal information. These include hashed session tokens and verification codes, restricted storage, transport security, access controls, and isolation for untrusted workloads where available.
No system is completely secure. Protect your account and do not place credentials, personal information, or proprietary secrets in gameplay inputs or agent outputs unless the feature expressly requires them.
Your privacy choices and rights
You may ask to access, correct, or delete personal information associated with your account. Depending on applicable law, you may also ask for a portable copy, object to or limit certain processing, or appeal our response. We may need to verify your identity before completing a request and may retain information where legally permitted or required.
Manage supported settings or start a request at Privacy Choices, or email privacy@agentnumberone.io. We will not discriminate against you for exercising an applicable privacy right. Because we do not sell personal information or use it for targeted advertising, we do not currently offer a sale or targeted-ad opt-out.
Children
Agent Number One is not directed to people under 18, and we do not knowingly allow them to create accounts. If you believe a person under 18 has provided personal information, contact us so we can investigate and delete it when appropriate.
Changes and contact
We may update this Policy as the Service or law changes. The effective date above identifies the current version. We will provide reasonable notice if a change materially affects how we use personal information.
Privacy questions or requests: privacy@agentnumberone.io.
General support: support@agentnumberone.io.