Privacy Policy

We collect only what the product needs to function:

• Account details. Your first and last name, an email address, a username, and a hashed password. Your name is never shown publicly — the leaderboard uses your display name or username — and your email is used only for account recovery and service messages.
• Simulated trading activity. Your virtual orders, positions, watchlists, price alerts and performance history. These are simulated records, not financial holdings.
• Content you post. Comments and any profile details you choose to add.
• Technical data. Basic log information such as IP address, browser type and timestamps, kept to operate and secure the service.
• Diagnostics and product usage. In the mobile app we record crash reports, performance data and in-app activity — screens opened, features used, and session replays of how the interface behaved. This is how we find bugs that never produce an error message, which are the ones that otherwise go unnoticed for weeks. Your account ID is attached so a fault can be traced to the account that hit it. Password fields are masked and never recorded.

We do not collect financial account numbers, bank credentials, government identifiers or payment card details, because the service never needs them.

To operate your account, run the simulator, show your performance, deliver price alerts and notifications you have asked for, prevent abuse, and fix problems. We do not use your data for automated decisions with legal effects.

We do not sell your personal information. We do not share it with advertisers or data brokers, and we do not use it for third-party advertising or cross-site tracking.

Market data — quotes, charts, company profiles and news — is supplied by third-party providers including Finnhub and Massive. Company descriptions come from Wikipedia and are used under CC BY-SA. Requests for market data are made for a symbol, not for a person: we do not send your identity to these providers.

Our infrastructure runs on Amazon Web Services, and the website is served through Vercel and Cloudflare. These providers process data on our behalf in order to host and deliver the service.

Diagnostics and product analytics in the mobile app are processed by Sentry (crash and performance reporting), LogRocket (session replay and product analytics) and PostHog (product analytics). Each acts as a processor on our behalf, receives your account ID rather than your name or email, and is contractually barred from using the data for its own purposes. None of them receives your password: those fields are masked before anything is recorded.

We keep your data for as long as your account exists. You can delete your account at any time from the Account screen in the app or on the web. Deleting your account removes your profile, simulated portfolio, orders, watchlists and alerts. Backups and routine logs may persist for a short period before being overwritten.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the app; for anything else, contact us and we will respond.

Passwords are stored hashed, never in plain text. Traffic is encrypted in transit with TLS. No system is perfectly secure, so please use a strong, unique password.

The service is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will remove it.

If we make a material change we will update the date at the top of this page and, where appropriate, notify you in the app.

Questions about this policy or your data can be sent to support@realtimesoftware.co.