Privacy Policy

• Account data (via Clerk): your email, username/handle, and — if you sign in with Discord or Google — the basic profile and ID from that provider.
• Profile & gameplay data: your handle, avatar, simulated trades, evaluations, duel/tournament results, rankings, clan membership, and similar in-game activity you generate.
• Billing data (via Stripe): subscription tier and status and payment metadata. We never see or store your full card number — Stripe handles card data directly.
• AI Mentor data: the messages you send to the AI Mentor, processed to generate replies.
• Usage & device data: if you accept analytics cookies, we collect usage events, pages viewed, approximate location (from IP), device/browser info, and session replays via PostHog. Without consent, these analytics do not run.
• Communications: messages you send us (e.g., support email).

• operate, secure, and improve the simulator and your account;
• process subscriptions and prevent fraud and abuse;
• power gameplay features (leaderboards, duels, clans, the AI Mentor);
• understand usage and improve the product (analytics — only with your consent);
• communicate with you about the service; and
• comply with legal obligations and enforce our Terms.

Where required (e.g., in the EU/UK), our legal bases are: performance of our contract with you, your consent (e.g., analytics cookies), our legitimate interests (securing and improving the service), and compliance with law.

We do not sell your personal data. We share it with the service providers below who process it on our behalf to run fxFundedSim. Each has its own privacy practices:

• Clerk — Account authentication, sign-in, and session management (privacy policy).
• Stripe — Subscription billing and payment processing (privacy policy).
• PostHog — Product analytics and session replay (loads only after you accept analytics cookies) (privacy policy).
• Neon — Managed PostgreSQL database hosting (your account + game data) (privacy policy).
• Vercel — Application hosting, delivery, and edge logs (privacy policy).
• Cloudflare — DNS, CDN, and network security (privacy policy).
• Upstash — Rate limiting and ephemeral caching (privacy policy).
• Resend — Transactional email delivery (privacy policy).
• Anthropic — Powers the AI Mentor feature (educational chat); messages are processed to generate replies (privacy policy).

We may also disclose data to comply with law, enforce our Terms, protect our rights and users’ safety, or in connection with a business transfer (e.g., merger or acquisition).

We use essential cookies (e.g., to keep you signed in) that are necessary for the service. With your consent, we also use analytics cookies (PostHog). Analytics do not load until you accept, and you can change your choice at any time via the “Cookie preferences” link in the footer. See our Cookie Policy for details.

We keep personal data for as long as your account is active and as needed to provide the service, then delete or anonymize it within a reasonable period, unless a longer period is required for legal, tax, security, or anti-abuse reasons (e.g., billing records). When you delete your account, we delete or anonymize your personal data, though some records may be retained as required by law or to preserve the integrity of competitions and anti-cheat history.

Depending on where you live, you may have rights to access, correct, delete, or port your data; to object to or restrict certain processing; and to withdraw consent. Under CCPA/CPRA (California), you have the right to know, delete, correct, and opt out of “sale”/“sharing” of personal information — note that we do not sell your personal data. To exercise any right, email us at dy1an.fx@fxfundedsim.org. We will not discriminate against you for exercising your rights, and you may appeal a decision by replying to our response.

We operate from the United States and use providers that may process data in the U.S., the EU, and elsewhere. Where data is transferred across borders, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

We use reasonable technical and organizational measures to protect your data (encryption in transit, access controls, reputable infrastructure providers). No system is perfectly secure, so we cannot guarantee absolute security.

fxFundedSim is for adults: you must be at least 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

We may update this policy; we will revise the “Last updated” date and, for material changes, provide additional notice. Questions or requests: dy1an.fx@fxfundedsim.org (fxFundedSim LLC).