Privacy Policy

Last updated: June 27, 2026

This Privacy Policy explains how JustTrades.us ("we," "us") collects, uses, and shares information when you use JustTrades.us (the "platform"). It applies to users worldwide, including visitors in the European Economic Area (EEA), the United Kingdom, and the United States. By using the platform, you agree to this policy.

The data controller responsible for your personal information is the operator of JustTrades.us. For any privacy question or request, contact us at [email protected].

Information we collect

• Account information — the email address and username you provide when you register, and authentication details needed to sign you in.
• Activity within the platform — your simulated trading activity (orders, fills, positions), trading accounts, challenges you create or join, leaderboard standings, friend connections and requests, and notifications.
• Preferences — settings such as your challenge-invitation preference and account visibility.
• Technical data — basic information your browser or device sends automatically, such as IP address, device and browser type, and usage logs, used for security and to operate the service.

We do not collect real financial account numbers, payment card details, or brokerage credentials, because the platform never handles real money.

How we use information

• To provide and operate the platform, including accounts, simulated trading, challenges, leaderboards, and friends.
• To display information you choose to make public (for example, a public challenge leaderboard shows your username and simulated performance).
• To send service-related messages and notifications.
• To secure the platform, prevent abuse and spam, and enforce our terms.
• To maintain and improve the platform.

Legal bases for processing (EEA and UK users)

If you are in the EEA or the UK, we process your personal data under the following legal bases set out in the GDPR and UK GDPR:

• Performance of a contract — to create and operate your account and provide the platform's features (Art. 6(1)(b)).
• Legitimate interests — to keep the platform secure, prevent abuse and spam, and maintain and improve the service, balanced against your rights and freedoms (Art. 6(1)(f)).
• Consent — where we ask for it, such as for any optional communications; you may withdraw consent at any time (Art. 6(1)(a)).
• Legal obligation — where processing is necessary to comply with the law (Art. 6(1)(c)).

Service providers

We rely on trusted third parties to run the platform, and your information may be processed by them on our behalf:

• Supabase — database, authentication, and backend hosting.
• Alpaca — delayed market data used to value simulated positions.
• Cloudflare — domain, DNS, content delivery, and email routing.

These providers process data under their own terms and privacy policies. We do not sell or share your personal information, and we do not use it for cross-context behavioural advertising.

International data transfers

We and our service providers may store and process your information in the United States and other countries, which may have data-protection laws different from those where you live. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant) or another lawful transfer mechanism. Contact us for more information about these safeguards.

What others can see

Some information is visible to other users by design. Your username is shown to people you connect or compete with. If you set a challenge or account to public, its leaderboard and simulated performance may be visible to other users. Information you keep private is limited to you and the people you invite.

Cookies and local storage

We use cookies and similar browser storage strictly to keep you signed in and to operate the platform. We do not use them to serve third-party advertising.

Data retention

We retain your information for as long as your account is active or as needed to provide the platform. If you request deletion, or after a prolonged period of inactivity, we delete or anonymise your personal data within a reasonable period — except where we must retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements. You may request deletion of your account and associated data at any time (see below).

Security

We use reasonable technical measures, including access controls that restrict each user's data to that user, to help protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Children

The platform is intended for adults and is restricted to users aged 18 and over, consistent with our Terms of Service. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or under the applicable age of digital consent, which is 16 or lower in parts of the EEA and UK). If you believe someone under 18 has provided us information, contact us and we will delete it.

Your privacy rights

You can access and update your account information from within the platform, and you can request correction or deletion of your data by contacting us at any time. Depending on where you live, you also have some or all of the following rights, which we honour regardless of your location:

• Access — to know what personal data we hold about you and obtain a copy.
• Rectification — to correct inaccurate or incomplete data.
• Erasure — to have your data deleted (the "right to be forgotten").
• Restriction — to limit how we process your data in certain circumstances.
• Portability — to receive your data in a portable, machine-readable format.
• Objection — to object to processing based on our legitimate interests.
• Withdraw consent — where processing is based on consent, at any time.

To exercise any of these rights, email [email protected]. We will not discriminate against you for exercising your rights.

EEA and UK users: you have the right to lodge a complaint with your local data-protection supervisory authority (for example, your national authority in the EEA, or the Information Commissioner's Office (ICO) in the UK) if you believe we have mishandled your personal data.

California and other US-state users: we do not sell or share your personal information. Subject to applicable law (such as the California CCPA/CPRA and comparable state laws), you may have the right to know, access, delete, and correct your personal information, to opt out of any sale or sharing (which we do not do), and not to be discriminated against for exercising these rights. To make a request, contact us at the email above.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.

Contact

Questions or requests about privacy? Contact [email protected].