Privacy & Data

We store your email address, a hashed password, the paper-trading data you create here, and — only if you turn it on — a two-factor secret. That's it.

We never ask for payment details, your real name, your phone number, or your address — and there is nowhere in this system to put them. Exchange API keys are optional, are kept in your browser rather than on our server, and are explained below. That isn't a policy we're promising to follow; it's a consequence of the site being paper-only. The worst case for a breach here is an email address and some simulated trades.

On the server running this site — not on your own computer. That's the main difference between this and the desktop application, whose data never leaves the machine it's installed on.

Your own Anthropic API key, if you add one, is not in that table — because we do not have it. It is kept in your browser and attached to each question as you ask it. It is never written to our disk, never logged, and never returned in any response. That is why you have to enter it again on a different browser, and why a breach of this server could not expose it. The honest limit of that promise: it lives in your browser, so a serious flaw in our pages could read it. Smaller risk than storing it here, not zero.

On memory, plainly: the notes are things you deliberately asked to be stored, so they are stored. Your questions are a different matter — keeping every one of them would make the AI marginally better and was never something you agreed to, so that one is a switch you have to throw yourself, and it starts off.

Each account's files live in a separate folder, and the code refuses to read or write per-user data unless it knows which user the request belongs to — it raises an error rather than guessing. That's deliberate: a crash is recoverable, one person seeing another's data isn't.

“Try it without signing up” opens a temporary demo desk. It asks for nothing — no email, no name, no password. The simulated trades you place in it are stored on the server in a folder of their own, under a random id, so the desk works while you use it.

A demo desk is temporary and is deleted automatically: 60 minutes after it opens, after 20 minutes without use, when you press “End demo” or “Create a free account”, or when the server restarts — whichever comes first. Nothing from it is carried over into an account.

For up to an hour after you open a demo, your IP address is held in the app's memory, not in its files, so it can limit how many demo desks one address opens per hour. The session cookie described below is what ties your browser to your demo desk.

• Exchange API keys, on our server. You may connect a read-only exchange key to see your real balances; that key is stored in your own browser and sent through our server to the exchange each time you refresh. It is never written to our disk, never logged, and is gone from our side the moment the request finishes. A test in the codebase connects with a marker string and then reads every file on the server looking for it. The key is only used to read balances; there is no code here that can place an order or move funds with it.
• Payment details. None are taken.
• Your real name, phone number or address. Not asked for.
• Analytics, tracking pixels, advertising or third-party trackers. None on any page.
• Telemetry. The site does not report your usage anywhere.

One cookie: a signed session cookie that records you're logged in. It's marked HttpOnly (JavaScript can't read it) and SameSite=Lax (other sites can't make your browser use it). It's strictly necessary for signing in — there are no optional or advertising cookies, which is why this site has no cookie banner.

Signing out clears it.

Market prices come from public exchange and market-data APIs. Those requests are made by the server, not by your browser, so those providers don't see your IP address or anything about you — they see one server asking for prices.

If the site operator has enabled AI explanations, the question you type is sent to Anthropic's API to be answered, along with your remembered notes and — only if you switched recall on — your recent questions. Nothing is sent unless you press the button on a question the app couldn't answer by itself. Commands like “add SOL” or “status” are handled entirely on this server and are never sent anywhere.

Your data is not sold, rented, or shared with anyone. There is no advertising on this site and no arrangement under which there could be.

Your account page has a delete button. It requires your password again, and it is a real deletion: the account record and every file belonging to you are removed from the server.

The code verifies the data is actually gone and reports an error if it isn't, rather than telling you it succeeded. If deletion ever fails you will be told so plainly — you'd have no way to check otherwise.

In place today:

• Passwords hashed with PBKDF2-HMAC-SHA256, 600,000 iterations, per-account salt
• Accounts lock for 15 minutes after 5 failed sign-ins
• Per-account data isolation, enforced in code rather than by convention
• Session cookies signed with a key generated on the server, never shipped in the source

Limits, and worth knowing:

• Confirming your email is optional. When this server has email set up, we send a link to confirm your address, but the account works without it — so an unconfirmed address may not belong to the person who typed it.
• Password reset needs email. A reset link can only be sent if this server has email set up. The reset page says whether it is available here; if it isn't, a forgotten password cannot be recovered, so choose one you'll remember.
• Backups. Ask the operator what backup arrangements exist before storing anything you'd be upset to lose. It's a simulator, so the answer matters less than it would elsewhere — but you should know.

These are listed because a security section that only lists strengths isn't information, it's marketing.

Depending on where you live you may have rights to access, correct, export, or delete your data, and to object to certain processing. Deletion is built in and available to you directly. For anything else, contact the operator using the address on the Terms page.