Privacy Policy

Last updated: July 2025

1. Information We Collect

Account Information

When you create a ChartPlay account, we collect your email address and a display name. If you choose to set a password, it is hashed using modern industry-standard password hashing algorithms (currently bcrypt) and never stored in plain text.

Google Login

If you sign up using Google OAuth, we receive your email address and name from Google, subject to your Google account permissions. We do not store passwords for Google-authenticated accounts. Google's use of your data is governed by Google's Privacy Policy.

Email Communications

We store your email address for account-related communications (verification, password resets, notifications). With your separate consent, we may send product updates and marketing emails. You can opt out at any time.

IP Address & Log Data

Our servers automatically collect your IP address, browser type, operating system, referring URLs, and timestamps when you access ChartPlay. This data is used for security monitoring, abuse prevention, and aggregate analytics.

Usage Data

We collect information about how you use ChartPlay, including trades simulated, challenges joined, challenge results, XP progression, journal entries, uploaded journal screenshots, subscription usage, features used, pages visited, and login activity. This data helps us operate the platform, track your progress, and improve the service.

Payment Metadata

When you make a cryptocurrency payment, we record the transaction hash, wallet addresses, blockchain network, payment currency, payment amount, and confirmation status. This data is used for billing, verification, fraud prevention, and support. We never collect or store private wallet keys, seed phrases, or fiat payment instrument details.

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the ChartPlay service
  • Track and display your challenge history, XP progression, journal data, and subscription usage
  • Store and serve uploaded journal screenshots as part of your trading journal
  • Communicate with you about your account, including verification, security alerts, and support
  • Send product updates and marketing emails (with your separate consent)
  • Monitor and prevent abuse, fraud, or unauthorized access
  • Generate aggregate analytics to improve the platform
  • Comply with legal obligations

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

Processing Activity Legal Basis
Account creation and management Performance of a contract
Service communications (security, support) Performance of a contract / legitimate interest
Marketing emails Consent
Analytics and platform improvement Legitimate interest / consent (where cookies are involved)
Security monitoring and abuse prevention Legitimate interest
Compliance with legal obligations Legal obligation

4. Payments

ChartPlay accepts cryptocurrency payments only. We do not process, store, or handle fiat currency payments or credit card information. Subscription downgrades are not supported, and plan upgrades are subject to eligibility requirements including a minimum remaining subscription duration.

Supported blockchain networks:

  • Bitcoin
  • Ethereum
  • Tron
  • Solana
  • TON

Supported currencies:

  • Native blockchain coins (e.g., BTC, ETH, TRX, SOL, TON)
  • USDT (on supported networks)

When you make a cryptocurrency payment, we record the following for billing, verification, fraud prevention, and support purposes:

  • Transaction hash
  • Wallet addresses involved
  • Blockchain network used
  • Payment currency and amount
  • Confirmation status

No sensitive financial data is stored on our servers beyond this metadata. All transactions are recorded on-chain and are subject to the immutability of the respective blockchain.

5. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements.

Data Type Retention Period
Account data (email, name, settings) Duration of account + 30 days after deletion
Challenge history, journal data, XP progression, subscription usage Duration of account + 12 months after deletion
Uploaded journal screenshots Deleted within 30 days of account deletion request
Payment records (on-chain transaction metadata) Indefinitely (immutable blockchain record)
Server logs (IP address, user agent, timestamps) 12 months
Aggregate analytics data Indefinitely

Journal Screenshots

Journal screenshots and images you upload are stored on our servers as part of your trading journal. These files are accessible only to you and are protected by the same access controls that secure your account. When your account is deleted, uploaded screenshots are removed from active storage within 30 days. We do not use uploaded screenshots for any purpose other than displaying them in your journal.

6. Your GDPR Rights

If you are in the EEA or the UK, you have the following rights under the General Data Protection Regulation:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
  • Right to Restrict Processing: Request restriction of how we process your data.
  • Right to Data Portability: Request a copy of your data in a machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Your CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: Request deletion of personal information we have collected from you.
  • Right to Opt-Out: Opt out of the sale of your personal information. ChartPlay does not sell personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact [email protected]. We will verify your identity and respond within 45 days.

8. International Data Transfers

ChartPlay operates globally and your data may be transferred to, stored, and processed in countries outside your country of residence, including the United States. When we transfer data from the EEA, UK, or Switzerland to other jurisdictions, we strive to apply appropriate safeguards to protect your personal data in accordance with applicable law.

9. Account Deletion

You can delete your ChartPlay account at any time through your account settings. Upon deletion:

  • Your personal data (email, name, settings) is deleted within 30 days
  • Your challenge history, journal entries, XP progression, and subscription usage data are retained for up to 12 months for operational purposes
  • Uploaded journal screenshots are removed from active storage within 30 days
  • On-chain payment records cannot be deleted as they are part of an immutable blockchain
  • Server log data may be retained for up to 12 months

You may also request earlier deletion of specific data categories by contacting [email protected].

10. Cookies & Tracking

ChartPlay uses cookies and similar tracking technologies for authentication, functionality, analytics, and (with your consent) marketing. For detailed information about the cookies we use, their purposes, and how to manage them, see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (sent to the address on your account) and/or through a notice on the platform. The "Last updated" date at the top of this page will reflect the most recent revision.

We encourage you to review this policy periodically. Your continued use of ChartPlay after changes take effect signifies your acceptance of the updated policy, where your consent is not otherwise required by law.

12. Contact Information

For privacy-related inquiries, data subject requests, or questions about this policy: