Privacy Policy

Shark Tycoon · last updated 24 August 2026

The short version: Shark Tycoon never asks for your name or email. It does create an anonymous account for you automatically so your progress can sync and so you can appear on leaderboards and trade with other players. That account is a random identifier — it is not linked to who you are unless you choose to sign in with Google or Apple. The mobile app shows rewarded ads, but only ones you choose to watch in exchange for an in-game reward — never a banner, never an interstitial you did not ask for.

The account you did not ask for

The first time you open the game it signs you in anonymously. No email, no password, no prompt — just a random identifier generated for your device. That identifier is what labels your save, your leaderboard entry and any trades you make.

If you tap Secure Account you can link a Google or Apple sign-in so your progress survives losing the device. Only then do we receive an email address, and only from that provider. Linking is entirely optional and the game is fully playable without it.

What is stored, and where

Your progress is written to your device and synced to our database so it can follow you between devices and power the shared parts of the game. Stored against your anonymous identifier:

• Your save — cash, portfolio, cards, streaks and settings.
• Leaderboards and seasons — the display name you choose, plus scores. Pick a display name only if you are comfortable with other players seeing it.
• Market activity — listings, bids, offers and equity you hold in shared companies, because other players have to be able to see and respond to them.
• Mini-game stats — plays and best scores.
• Gameplay analytics — see below.

This data lives in Supabase, hosted on AWS in Sydney, Australia (ap-southeast-2). It is our processor; we do not sell or share your data with anyone else.

Analytics — what we measure and what we refuse to

The game records what happens in it: deals bid and passed, mini-games opened and finished, screens visited, how long you spent on the previous screen, which buttons you tapped, and where onboarding lost you. We use this to work out which parts of the game are confusing and which are not worth keeping.

Every event is tied to your anonymous identifier. No event carries personal data — the event catalogue is defined in code and deliberately admits only the game's own ids (a deal id, a card id, a game id). No email addresses, no display names, no location, and no device fingerprinting.

The same events are also sent to Google Analytics, so we can read them next to the ad reporting below. Google Analytics is given its own randomly generated identifier that is not the one your game data is keyed by, which means the two cannot be joined back together by us or by Google. See Google's privacy policy for how they handle it.

Advertising

In the mobile app we show rewarded ads through Google AdMob. Rewarded means you are never shown one unless you tap a button asking to watch one in exchange for an in-game reward. There are no banners and no interstitials, and no part of the game is locked behind watching an ad — if you never tap those buttons you will never see an advert.

In the browser version there is no ad network at all. The “sponsored” placement you may see there is a placeholder drawn by the game itself, using invented company names; nothing is loaded from an advertiser and no identifier is read.

To show an ad, AdMob may read your device's advertising identifier — a resettable id held by your phone, not by us. We never receive it.

Your choices. On first launch the app asks, through Google's own consent screen, whether ads may be personalised. If you decline — or if you never answer — you still get ads and still get rewards, but they are non-personalised. On iOS the system also asks separately for permission to track; declining that has the same effect. You can change your mind at any time in your device settings (iOS: Settings › Privacy & Security › Tracking; Android: Settings › Privacy › Ads), and you can reset the advertising identifier there too.

We record how our own ad placements perform — how often one was offered, filled, watched to the end or closed early. That is counted against your anonymous identifier and carries nothing about the advert or about you.

Deleting your data

Clearing your browser's site data (or uninstalling the app) removes the local copy of your save, but the synced copy stays on our servers, because it is keyed to an anonymous identifier we cannot match back to you once the device forgets it.

To have the synced copy deleted, email enaayahagenticai@gmail.com from the address you linked, or send us the SHARK-ID shown on your profile. We will delete the account and everything attached to it.

Children

Shark Tycoon is a game about startup investing and is not directed at children under 13. We do not knowingly collect data from them. If you believe a child has been given an account, contact us and we will remove it. Because the app is not directed at children, ads served in it are not restricted to child-directed treatment; if that ever changes, this page changes with it.

Changes

If what we collect changes, this page changes with it and the date at the top moves. This version corrects an earlier one that described the game as fully offline; that stopped being true when cloud saves, leaderboards and player-to-player trading were switched on. It also adds the rewarded ads and Google Analytics described above, which ship in the same release as this page.