How we handle your data

PR Trading Pro (“PaperRush”) is a paper trading simulation platform for educational and entertainment purposes. No real money is invested or at risk. This policy explains how we collect, use, and protect your information.

For a category-by-category breakdown of what we monitor, why, who sees it, and how long we keep it, see the Transparency Register. If something is not on that list, we do not do it.

Account information: When you sign in with GitHub or Google, we receive your name, email address, and profile photo from your OAuth provider. We store this to identify your account.

Profile data: Username, avatar, trading style, risk archetype, option approval level — all provided voluntarily by you.

Trading data: Paper trades, scenarios, watchlists, limit orders, predictions, challenges, and XP balances. This is all simulated — no real financial data.

Usage data: Pages visited, features used, and error logs to improve the app. We use Sentry for error monitoring.

Feedback: Bug reports and feature requests submitted through the /feedback page.

Mirror data: If you use The Mirror (digital twin), we store your uploaded transcripts and conversation history. All Mirror data is encrypted at rest using AES-256-CBC. Personality traits extracted from your transcripts are stored as encrypted JSON. You can delete your Mirror data at any time.

We use your information to:

• Provide and personalize the paper trading experience
• Display your profile on leaderboards and the graffiti board
• Generate AI coaching insights (your data is sent to your chosen AI provider)
• Build your digital twin in The Mirror (transcripts, conversations, and personality traits are encrypted and stored per-user)
• Monitor and fix errors (Sentry)
• Respond to feedback and support requests
• Enforce rate limits and prevent abuse

We share data with these services to operate the platform:

• Vercel — hosting and serverless functions
• Neon — PostgreSQL database
• Stripe — subscription billing (if you subscribe to Pro/Premium)
• Sentry — error monitoring
• GitHub/Google — OAuth authentication
• AI providers — OpenRouter, Gemini, Groq, etc. (when you use AI features, your prompt and market context are sent to the selected provider)

We do not sell your personal information to anyone.

Essential cookies: Session authentication (Auth.js). Required for the app to work.

Preferences: UI settings, cost basis method, display preferences stored in localStorage.

Analytics: Only with your consent via the cookie banner. Used to understand feature usage and improve the product.

We keep your account data as long as your account exists. If you delete your account, we remove your personal data within 30 days. Anonymized, aggregated analytics data may be retained.

You can:

• Access your data — your profile, trades, and activity are visible in the app
• Update your data — edit your profile in Settings at any time
• Delete your account — use the “Delete Account” option in Settings to permanently remove your data
• Withdraw cookie consent — clear your browser cookies or use the cookie banner preferences
• Contact us — submit a request through the feedback form

For EU residents: you have additional rights under GDPR including data portability and the right to object to processing. Contact us through the feedback form to exercise these rights.

PaperRush is not intended for users under 13. We do not knowingly collect data from children.

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the platform after changes constitutes acceptance.