Privacy
Version 2026-09-03.
The short version
- We collect what the game needs: your email, what you choose to put on your profile, your trades, and a few security signals.
- Card details go straight to Stripe. We never see your card number.
- We do not sell data, run advertising, or use third-party tracking.
- Closing your account erases your identity; the anonymised ledger is kept because accounting rules require it.
What we collect
- Account: your email address (used to sign you in and contact you) and the display name, avatar and bio you choose to add.
- Activity: your purchases, trades, positions, founding contributions, referrals and the resulting ledger. This is the game.
- Security signals: the IP address of your sign-ins and trades, and a card fingerprint that Stripe gives us (an opaque token, not your card number). We use both only to spot one person running several accounts and to protect the referral programme.
- Technical: ordinary server logs (request paths, timing, status, IP) kept for a short period to keep the service running and secure.
Cookies
- authjs.session-token: keeps you signed in. Essential.
- nm-theme (browser storage): remembers dark or light theme.
- nm_ref: remembers a referral code for 30 days after you follow a referral link, so the referrer can be credited.
There are no advertising or analytics cookies.
Why we use it
To run the game you asked for (contract), to keep it fair and secure and to comply with accounting and anti-fraud duties (legal obligation and legitimate interest), and to send you the emails needed to sign in and to tell you about copy trades made on your behalf. We do not send marketing email.
Who else sees it
- Stripe processes card payments and sees what a payment processor needs.
- Resend delivers our transactional emails and sees your address.
- Cloudflare carries traffic to our servers and sees connection data.
- Backblaze stores encrypted database backups.
- YouTube Data API gives us public channel statistics; nothing about you is sent to YouTube.
We share data with authorities only when the law requires it.
What other players see
Nothing, unless you turn on a public profile. Then your display name, avatar, bio, badges and aggregate stats are visible at your profile link. Trade activity on market pages is shown without names.
How long we keep it
Your account data for as long as the account exists. Server logs for up to 30 days. The trading and fee ledger for as long as accounting, tax and anti-fraud rules require, up to ten years, in anonymised form once you close your account.
Your rights
You can see everything we hold about your account from the wallet, portfolio and profile pages. You can change your profile at any time and close your account yourself, which erases your email, name, avatar and bio. For a copy of your data, a correction, or anything else, email [email protected]. If you are in the EU or UK you also have the right to complain to your data-protection authority.
Changes
We will announce material changes on the homepage and update the version date above. See also the terms of service.