Privacy policy

1. Information we handle and why

• Website visits: our hosting provider processes information such as your IP address, browser information, requested page, and request time to deliver pages, maintain security, and diagnose failures. These static public pages contain no advertising trackers, analytics scripts, sign-in widgets, or forms.
• Account and invitation information: when you are invited and sign in, we process authentication-provider identifiers, account status, invitation acceptance, and session information to check access and keep your simulated portfolio associated with your account. Our authentication provider also handles the email address and profile information used for sign-in.
• Simulated activity: holdings, virtual cash, orders, trade history, watchlists, settings, save revisions, and timestamps are stored to operate the simulator and synchronize your account. These are paper-trading records; the service does not require exchange credentials, wallet seed phrases, or payment-card information for beta trading.
• Support and feedback: if you email us or send feedback, we receive your contact details and the information you choose to include. We use it to answer questions, investigate issues, and improve the beta. Avoid sending passwords, private keys, or unneeded personal information.
• Technical diagnostics: our service providers may process security, access, and error logs. The beta application's own operational events are designed to record operation type, timing, status, and outcome rather than raw portfolio contents or sign-in credentials.

2. Google sign-in information

If you choose Google sign-in, Google authenticates you and shares basic identity information with Clerk, our authentication provider. This can include your Google account identifier, name, email address, and profile picture. Our simulator uses the resulting Clerk identity and verified session to check your invitation, connect your account, and support secure access.

The Google connection requests only basic sign-in scopes: openid, email, and profile. It does not request access to your Gmail messages, Google Drive files, contacts, or calendar. Your Google password is entered with Google and is not provided to CryptoTradeSim.

We use Google user data only for authentication, account linking, access security, and related support. We do not sell Google user data, use it for advertising, or use it to train AI models. Human access is limited to what is needed for an authorized support request, security investigation, or legal obligation.

You can revoke the connection in your Google Account's third-party connections settings. Revoking Google access does not itself delete an existing CryptoTradeSim account or its simulated records; contact us for deletion.

3. Service providers and other disclosures

We use Clerk for authentication, Vercel for hosting, Neon for account and simulated-portfolio storage, and Spacemail for the support mailbox. Google handles Google sign-in if you choose it. These providers process information needed to supply their services and may also maintain their own security and service records.

Market-data providers receive asset-data requests used to supply prices, charts, and asset information. Our account system is not designed to send your Google identity or full simulated portfolio to market-data providers.

Authorized people operating CryptoTradeSim may access information needed for support, account administration, security, or recovery. We may disclose information when required by law or when reasonably necessary to protect users, investigate abuse, or establish or defend legal rights. Information may be processed in the United States and other locations where our providers operate.

4. Cookies, device storage, and security

Account sign-in uses authentication cookies or similar session storage. The account simulator also uses browser storage for account-specific settings and a local portfolio cache. Clearing storage can remove a local copy and may sign you out; first confirm that your latest work is saved or export a recovery copy where available.

We use access controls and encryption features to reduce unauthorized access. No service can guarantee absolute security, uninterrupted saving, or recovery of every change. A beta error may cause loss of simulated progress.

5. How long information is kept

We keep active account information and simulated records while needed to provide your account and operate the beta. Support correspondence is kept while needed to resolve the request and maintain a useful support history. Security, dispute, or legal records may need to be retained longer for those purposes.

If you request deletion, we verify the request and review the account data we control for removal, subject to legitimate security and legal needs. Copies in provider logs or recovery systems may persist under the applicable provider retention process. A deletion request is not a promise of immediate removal from every provider system. Contact us if you need information about a specific record or retention period.

6. Your choices and requests

You can stop using the beta, manage the sign-in methods offered by Clerk, revoke Google's connection through Google, and use the simulator's available export controls. Email support@cryptotradesim.com to request access, correction, export, or deletion of information we control. We may ask you to verify ownership of the account, but will not ask for your password or wallet seed phrase. Additional privacy rights may apply depending on where you live.

7. Beta eligibility and changes

The initial account beta is intended for adults aged 18 or older. It is not offered as a children's service. Contact us if you believe a child has provided account information.

We will update this notice when our data practices change. If we propose a new use of Google user data beyond these disclosed purposes, we will provide notice and obtain any required consent before that new use. The current notice will remain available here.