Privacy Policy
Last updated:
What we collect
- Account info — email address and a hashed password. That's the only identifier required to sign up.
- Trading activity — every order, trade, and ledger entry tied to your account, for audit and settlement.
- Technical data — server logs (IP address, user-agent, request path) used to keep the Service running and prevent abuse.
What we don't collect
We don't ask for your name, address, phone number, date of birth, or government ID. We don't run KYC on play-money accounts. We don't run third-party analytics or advertising trackers. We don't sell or share your data with marketing partners.
Why we keep it
Trading history is kept for audit purposes (your ledger should always reconcile) and to support features like portfolio history and leaderboards. Server logs are kept for a short period and used only for operational debugging and abuse mitigation.
Your data, your control
You can delete your account by emailing support@outcomex.example. Account deletion removes your email and login credentials. Aggregated, anonymized trading history may be retained to preserve market integrity.
Cookies
We use a session cookie to keep you signed in and a CSRF token to protect form submissions. We don't use tracking cookies or third-party analytics.
Security
Passwords are hashed with ASP.NET Identity's default hasher (PBKDF2). Connections are served over HTTPS in production. We follow standard defense-in-depth practices, but no system is unbreakable — please use a strong, unique password.
Questions
Email privacy@outcomex.example.