Privacy Policy

Last updated:16/02/2026

This policy may be updated as the project evolves. Updates will be reflected by the �Last updated� date above.

1. Data Controller

Vilho Antton Kettunen

Finland

Email: [email protected]

2. What Data We Collect

Account information (Google Login): email address and basic profile fields provided by Google Sign-In (we do not collect or store passwords).
Profile information you provide: username (player name) and mailbox fields (including optional mall mailbox).
Trading / transaction / history data: records needed to operate the tool and preserve transparency/integrity of trading history. These records are linked to an internal user ID and may include your chosen username.
Leaderboards preference: whether you opt in/out of public leaderboards (OUT / HALF / FULL), including an internal anonymous label/ID used for HALF opt-in.
Statistics cache: computed summaries of your activity used to display your personal statistics and, if opted in, leaderboards.
Technical data / local device storage: we may store a Google login token in your browser (localStorage and/or cookies) to restore your session. You can remove it by logging out and/or clearing your browser storage.

3. Purpose of Processing

To provide login and account functionality.
To operate and maintain the service (including account settings, trading tools, and history views).
To provide transparency and integrity of trading history, and to compute statistics.
To improve the functionality and safety of the tool.

We do not use your email for marketing purposes.

4. Legal Basis (GDPR Article6)

Performance of a contract (Art.6(1)(b)): processing needed to provide access and core service features.
Legitimate interests (Art.6(1)(f)): operating, securing, and improving the service; preserving transaction integrity and transparency.
Consent (Art.6(1)(a)): public leaderboards participation is opt-in and can be changed in Account Settings.

5. Data Retention

Your email is stored while your account remains active.
If you delete your account, your email is removed from the system.
Important: historical trading/transaction/history data may be retained for transparency and integrity purposes.
After account deletion, retained historical data is generally linked to an internal user ID and/or historical username snapshots. This means it is pseudonymized, not fully anonymized.

6. Data Sharing / Third-Party Services

We do not sell or rent personal data.
We use third-party providers to operate the service. In particular, Google and Cloudflare may process data as part of providing authentication and hosting/delivery services.
For more details, please refer to the providers� privacy policies.

7. International Transfers

Some third-party providers (such as Google and Cloudflare) may process data in jurisdictions outside the EU/EEA as part of providing their services. Please refer to their privacy documentation for details.

8. Your Rights Under GDPR

If applicable, you may have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data (note: some history may be retained as described above)
Restrict or object to processing
Receive a copy of your data
Lodge a complaint with the Finnish Data Protection Ombudsman

To exercise your rights, contact: [email protected]

9. Security

We implement reasonable technical and organizational measures to protect personal data. However, as this is an early-stage hobby project, no system can guarantee absolute security.

10. Changes to This Policy

This Privacy Policy may be updated as the project evolves. Updates will be reflected by the �Last updated� date above.