Account and identity
We process the verified email address, chosen display name, automatically generated profile identifier, authentication method, and active sessions. For social sign-in, we retain the technical identifier supplied by Google, Facebook, or LinkedIn. For email and password access, we retain only the cryptographic password derivative, never the plain-text password.
Virtual portfolio
We retain virtual cash, holdings, orders, trades, exit policies, and historical valuations needed to calculate portfolio value. These values are not money or real ownership.
What appears on the leaderboard
The leaderboard displays the chosen public name, virtual value, return, and join date. Email addresses and authentication identities are never public.
Security and providers
Cloudflare delivers and secures the application, Turnstile validates authentication requests, Brevo sends activation and reset links, and Google, Meta, and LinkedIn process social authentication when selected. Activation, reset, and session tokens are stored only as SHA-256 hashes.
Account deletion
The account can be deleted from the game settings. Identity data, credentials, and sessions are removed or anonymised, while the virtual financial ledger remains anonymous to preserve record integrity. We retain a non-reversible SHA-256 fingerprint calculated with an application secret, solely to prevent the same address from registering again and receiving the initial virtual capital more than once.
Index data
The index stores domains, web origins, and aggregated popularity and experience values. It does not collect WHOIS records, contact people, or identifiers of visitors to analysed sites.
Contact
For privacy requests, email contact@growthacceleration.ro.