Privacy Policy

InvestGame provides a virtual stock and cryptocurrency trading simulation platform for educational and entertainment purposes. We collect only the information strictly necessary to provide, protect, and improve our services.

Information You Provide

When you register an account or interact with our platform, we may collect:

• Email address: Used for account creation, login verification, password resets, and critical platform notifications.
• Username: Displayed on leaderboards, game rooms, and multiplayer lobbies.
• Login credentials: Passwords are cryptographically salted and hashed using industry-standard bcrypt algorithms.
• Simulation gameplay data: Virtual balances, transactions, portfolios, historical performance, and match statistics.
• Support communications: Messages or feedback sent directly to our support team.

Automatically Collected Technical Data

When you access InvestGame, our systems may automatically log standard technical data, including:

• Device & Browser Information: Browser type, operating system, device category, and screen resolution.
• Log Data: IP address, timestamp, requested URLs, and error diagnostics to prevent malicious activity and DDoS attacks.
• Usage Statistics: Feature engagement patterns and session duration to help us refine user experience.

We process your data strictly for legitimate operational and educational purposes, including:

• Creating, authenticating, and managing your user account securely.
• Providing real-time virtual trading execution, portfolio tracking, and leaderboard computation.
• Powering multiplayer game rooms, invitation codes, and synchronized match clocks.
• Delivering account security codes, transaction receipts, and optional weekly progress digests.
• Detecting and mitigating fraud, bot spam, cheating, and malicious API exploitation.
• Complying with applicable legal and regulatory obligations.

We implement stringent technical and organizational safeguards designed to secure your personal data against unauthorized access, alteration, disclosure, or destruction.

• Encryption in Transit: All web traffic is strictly encrypted using HTTPS / TLS 1.3 cryptographic protocols.
• Credential Protection: Passwords are never stored in plaintext; all authentications use irreversible cryptographic hashing.
• Access Controls: Database clusters are isolated with strict IP access rules and least-privilege administrative roles.

While we apply rigorous security best practices, no online platform or data transmission over the Internet can be guaranteed 100% immune to potential breaches. By using the Service, you acknowledge this inherent risk.

We do not share your personal data with third parties except in the following limited operational contexts:

• Infrastructure & Service Providers: Trusted cloud hosting, database providers, and transactional email gateways (e.g., SMTP servers) bound by strict data processing and confidentiality agreements.
• Legal & Regulatory Compliance: When required by lawful court subpoenas, warrants, or applicable statutory mandates.
• Platform & User Safety: To enforce our Terms of Service, protect community security, or investigate system abuse.

InvestGame uses first-party cookies and modern local storage mechanisms strictly to keep your session authenticated, store theme preferences, and protect form submissions against CSRF exploits.

We may use aggregated privacy-conscious web analytics (such as Google Analytics with IP anonymization) to observe platform performance and error trends. You can configure your browser to block or reject cookies; however, certain interactive trading and authentication features may become inaccessible.

We retain your personal data for as long as your account remains active or as needed to provide you with access to your games, simulation records, and leaderboard achievements.

If you close your account or submit a formal deletion request, we will permanently purge or anonymize your personal identifiers from our production systems within 30 days, retaining only minimal aggregated records required for security logs or statutory compliance.

Under applicable privacy frameworks (including the EU General Data Protection Regulation / GDPR), you are entitled to exercise the following individual data rights:

• Right of Access: Request a complete summary and copy of all personal data held about you.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal details.
• Right to Erasure ("Right to Be Forgotten"): Request full deletion of your account and associated personal data.
• Right to Restrict or Object: Restrict or object to specific data processing activities.
• Right to Data Portability: Receive your data in a structured, machine-readable format.

To exercise any of these privacy rights, email us directly at [email protected]. We do not charge fees for standard data rights requests.

You may request complete account deletion at any time. Upon receiving your verified deletion request, we will permanently delete:

• Your registered email address and username.
• Password hashes and authentication tokens.
• Solo simulation game records, portfolio balances, and transaction logs.

In multiplayer game rooms, historical trade items will be anonymized to maintain leaderboard integrity for surviving participants without exposing your personal information.

InvestGame is intended for individuals who are at least 13 years of age (or the minimum legal age required in their country of residence). We do not knowingly solicit or collect personal information from children under 13.

If we learn that a user under 13 has registered an account without verified parental consent, we will promptly delete that account and all associated data.

Our Service may contain external links or integrated widgets (such as financial charting tools). We are not responsible for the privacy practices, tracking scripts, or content maintained by external websites. We encourage you to review their respective privacy policies upon navigating away from InvestGame.

InvestGame operates globally. If you access the Service from outside our primary server regions (such as the European Union or United States), your data may be processed in cross-border facilities governed by standard contractual clauses and robust data privacy safeguards.

We may revise this Privacy Policy periodically to reflect new platform capabilities, technical enhancements, or statutory changes. Any updates will be published immediately on this page with an updated "Effective Date". Your continued use of the platform after updates take effect represents your acknowledgment of the revised terms.

If you have questions, feedback, or formal data requests concerning this Privacy Policy, our data protection officer is readily available: