1. Controller and scope
This Privacy Policy governs processing in connection with the Real World Markets classroom (the “Service”). The operator of the Service (“we”, “us”) is the controller of any personal data that may arise from your use, to the limited extent such data exists. The Service is a non-commercial educational simulation. We do not operate a customer relationship management file, or know-your-customer register. A floor account is an identity for public notes, not a brokerage account.
2. What we process if you sign in
If you sign in, we process the identity the provider sends (Google, X, or the email you typed), a public handle, the notes, replies, and agrees you publish on the floor, and who you follow or which ticker rooms you watch. Those posts are public. Follows and room watches stay with your account so we can build your Following feed. Starred favorites (instrument ids only — not paper cash, not fills, not how much coin or stock you typed into Your bag) also stay with your account so the same list can open on another device. Bag quantities and average cost stay in this browser. You can hide holdings on the Favorites page so a person looking at this screen cannot see size. The rest of the paper desk stays in this browser. We do not run advertising pixels, analytics SDKs, session replay, or fingerprinting for ads.
2a. The Professor (Tape AI)
If you ask the Professor a question, that question and enough prior turns to keep the conversation coherent are sent to xAI’s language model API so a reply can be generated. We do not keep a server-side copy of the chat as a user file. A transcript may be written to this browser’s local storage if you leave “Remember the desk” on, so you can continue later. Wipe erases it. xAI is a separate controller/processor of the prompt content for the purpose of generating the reply; their processing is described in their own terms. Do not paste account numbers, government IDs, or other sensitive personal data into the Professor. The Professor is not personalized investment advice and is not used to make legal or similarly significant automated decisions about you.
Talk to Professor Moon is optional. A tap starts listening. This device’s speech service converts your voice to text. We do not keep a recording. The text of the question is then sent to xAI the same way a typed question is. He may speak the reply out loud on this device. Camera, location, and payment stay off. The microphone is never used in the background.
3. Categories of processing
The Service processes, on your device, a classroom store that may include paper cash, simulated positions, a watchlist, fill history, price alerts, device notices, lesson progress, Professor (Tape AI) transcripts, and legal-notice acknowledgements. That store is written to the user agent’s local storage only if you leave “Remember the desk” on. It is not transmitted to us as a profile. Paper coins, alerts, and notices are scoped to this device and, if you sign in, to that account only. They are not shown on another person’s desk, the public floor, or another account on this device. The public floor never receives your book. The clerk blocks notes that paste quantities, cash, alerts, or notices. House count is a tally of unique openings, signed-in sessions, and which classroom rooms were opened for a UTC day. We store a one-way token for that day, not a name, and we drop tokens after two weeks. Weekly totals (how many looked in each UTC day that week, and which rooms were opened — not who) stay on the house desk so operators can see what people used after a Monday UTC reset. DYOR, the paper desk, World Circuit, and Tape Run open only after you sign in. There is no guest trial of those rooms, and no free week of Floor, Lab, Compare, Top 150–1000, or crew. A cookie keeps one look-id on this device so a return tap is not counted as a new person. It is not a roster. Your browser and network operator may independently process technical data such as IP address, user-agent, and request logs when the Service is fetched from its host; we do not use those logs to identify you.
4. Lawful basis
Where the GDPR or UK GDPR applies, local storage of classroom state is processed on the basis of your consent (Art. 6(1)(a)) as expressed by the control above, and otherwise on legitimate interests (Art. 6(1)(f)) in operating a functioning educational tool that remembers progress on a single device. You may withdraw consent by switching the control off or using erasure. Where ePrivacy / PECR rules on device storage apply, strictly necessary storage is limited to what the Service needs to run; optional persistence is consent-based. In Canada, PIPEDA and substantially similar provincial laws (and Quebec Law 25) treat this classroom store as information on your device; we do not operate a commercial Canadian customer file. Mexico’s LFPDPPP is addressed the same way: there is no ARCO request we can fulfill across devices because we cannot identify you across devices.
5. Retention
Device-local data is retained until you erase it, clear site data in the browser, or disable persistence. A signed-in desk is retained until you use Delete my account, or until we must drop it for law or abuse. We do not keep a marketing file. House counts are anonymous tallies and are not tied to your name.
6. Your rights
Subject to applicable law (including GDPR, UK GDPR, PIPEDA and substantially similar Canadian provincial laws, Quebec Law 25, Mexico’s LFPDPPP, CCPA/CPRA, and other US state privacy statutes), you may have the right to access, correct, delete, restrict, or port personal data, to withdraw consent, and to lodge a complaint with a supervisory authority. Signed-in desks use Delete my account on this page and on Security — it completes in the app and erases the desk across devices. Export a copy is portability / access. Wipe this browser erases this device only. If you never signed in, we cannot fulfill a request that requires identifying you across devices, because we cannot.
7. Children
The Service is a general-audience classroom. It is not directed to children under 13. We do not knowingly collect personal information from children. We do not ask for a date of birth. We do not check a government ID. Paper trading is teaching, not a live account. If you believe a child under 13 has stored data here, use erasure on that device. COPPA and similar child-privacy rules: we do not direct this Service at children.
8. Third parties and international transfers
Typefaces are served from this host. We do not load Google Fonts. Asking the Professor sends prompt text to xAI to generate a reply; xAI is a separate processor of that content. A $5 Desk Pass month is listed and not billed yet. When a charge exists, the receipt says classroom software, not a trading account. We do not host a card number. Hosting and content delivery for the Service may occur in more than one country. Sign-in, if you use it, sets a host-only session cookie so the classroom can know it is you — not an ad cookie. We do not appoint advertising processors. We do not transfer a customer database because we do not have one.
9. Security
We apply data-minimization and privacy-by-design: no KYC file, no telemetry SDKs, referrer policy set to no-referrer, and no request for camera or geolocation. The microphone is requested only if you tap Talk to Professor Moon, and only on this classroom. We do not keep the recording. Cross-site scripted requests are refused. Floor writes are authenticated and rate-limited. Markup and obvious secrets are stripped from notes and Professor questions. Local storage is only as secure as the device you chose. On a shared computer use a device lock code, Lock this desk, the shared-computer control, or private browsing. See the Security page for the operational lock.
10. Do not sell or share
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. A “Do Not Sell or Share My Personal Information” request is satisfied by the fact that there is nothing to sell or share. Global Privacy Control signals are respected in that we do not engage in the sales or sharing those signals are meant to refuse.
11. Automated decision-making
The Service does not make automated decisions that produce legal or similarly significant effects. Quizzes, paper fills, and Professor replies are educational mechanics. The Professor (Tape AI) is a language model that can err; it does not decide your legal rights, credit, or eligibility.
12. Changes
We may revise this policy. The effective date above is the version that applies. Continued use after a revision constitutes acceptance of the updated policy where permitted by law.
13. Contact
Privacy questions, access, correction, or complaints: [email protected]. Do not send seed phrases, passwords, or account numbers. We do not need them, and we will not use them.