Personal data protection
Version 2026-10-05-v9 / 0
Controller and contact
- Operator
- Not specified yet
- Address
- Not specified yet
- Contact
- Not specified yet
Data we process
We store your name, email and password hash, role, account status, test balances, metal holdings, quotes and transaction history. Changes and requests are recorded in the audit log. To limit sign-in attempts, the application stores hashed IP and email identifiers; the host may also retain technical access logs.
Savings plans / Support
Savings plans store the name, amount, metal, frequency, dates and links to completed purchases. Support stores your request text, the latest administrator reply, status and timestamps. These records are visible to you and authorized administrators and are included in your account data download.
Purposes and legal bases
Data supports accounts, test trading and support; security records help prevent fraud and preserve an audit trail. The operator must establish a suitable basis for each purpose: a service request or contract, a substantiated legitimate interest, or a specific legal obligation. Acknowledging this policy is not consent to marketing or all processing.
Access and recipients
Authorized administrators can manage accounts and transactions. Data is stored by the host. Enabling the market chart connects to an external provider. The operator must identify service providers, their locations and cross-border transfer conditions.
Hosting and data location details still need to be completed.
Staff permissions
Support staff can read and answer requests; access to financial data and reserves is controlled by separate profiles. Permission changes invalidate prior sessions and are audited. The staff profile is included in the personal data export.
Internal transfers and QR
A signed-in user with the exact recipient code sees the recipient name before confirmation. Transfer parties see each other's name, internal code, amount and time. Email and balance are not shared. QR codes are generated locally; scan frames are not sent to the server. Camera access starts only upon your action. The theme preference is stored in this browser's localStorage.
Retention and erasure
Retention periods by data category still need to be completed.
Entering retention text does not enable automatic erasure. In this version, data and backup erasure require an operator-controlled procedure. Financial and audit records cannot be erased through self-service; any need to retain them must be assessed for each request.
Your rights
You may request information, access, a copy, correction, erasure or restriction, and object where the law permits. You may withdraw consent for processing based on consent. If a request is limited, the operator must explain why. You may contact the competent supervisory authority or a court.
Use your account page to download your profile, holdings and transactions or submit a request. For further details, use the contact above. Responses are provided within the deadlines set by applicable law.
External market chart
The TradingView chart loads only after you choose to enable it, in an isolated external frame. The provider receives IP and technical data; its policy describes cookies and international processing. Your platform account and transactions are not shared. Disabling stops the current embed; it does not erase data already transmitted.
TradingView Privacy Policy ↗Cookies and security
An essential session cookie is used for authentication. Language is stored in the same session. No optional analytics or advertising cookies are used. HTTPS, role checks, CSRF protection and password hashing are enabled. MFA is disabled in this test version.
The platform uses test funds. Do not enter identity documents or card details here.
My account