Privacy Policy

Responsible for data processing on learn-daytrading.com is:

Contact for privacy matters: [email protected]

Depending on your usage, we process the following data:

• Account data: email address, optional display name, password (stored only as a salted hash, never in plain text), time of registration and of your last login, and the confirmation status of your email.
• Learning and usage data: progress, completed lessons, XP, streak, and your virtual trades, positions, and results in the simulator (play money, no real money).
• Technical data: connection data generated when you access the site, such as IP address, time, the requested resource, and browser identifier, which are needed to deliver and secure the service.

We process this data to provide and secure your account, store your learning progress, operate and improve the platform, and prevent abuse. The legal basis is the performance of the usage relationship (Art. 6(1)(b) GDPR) as well as our legitimate interest in a secure, functioning service (Art. 6(1)(f) GDPR). Where you give consent, for example for optional messages, Art. 6(1)(a) GDPR is the basis.

After registration, we send you an email with a confirmation link. For reliable delivery of transactional emails, we use the service SMTP2GO. Your email address is transmitted to this provider solely for the purpose of delivery.

Optionally, you can sign in with your Google account (Google Sign-In). In doing so, Google transmits your email address, your name, and a user identifier to us in order to create your account or sign you in. Google's privacy policy applies in addition. Use of this feature is voluntary.

The platform is operated on Railway (server, database), and delivery and security are handled via Cloudflare (CDN, DNS, SSL). These providers process data on our behalf as processors. Market data in the simulator is sourced from the exchanges Binance and Bybit; no personal data about you is transmitted to these exchanges.

We set one technically necessary cookie for sign-in (a secure, httpOnly cookie containing your session token). Sign-in does not work without this cookie. We do not set any advertising or tracking cookies for marketing purposes.

We store your account data for as long as your account exists. If you delete your account or request deletion, we remove your personal data unless statutory retention obligations prevent this. Technical connection data is kept only briefly for security purposes.

The controller is based in the USA (Delaware). Individual service providers may also process data in other countries. We take care to ensure an adequate level of data protection, for example through appropriate contractual safeguards.

You have the right to access your data, to rectification, erasure, restriction of processing, data portability, and to object to certain processing. You can withdraw any consent you have given at any time with effect for the future. To do so, contact [email protected]. If you reside in the EU, you also have the right to lodge a complaint with a data protection supervisory authority.

We update this privacy policy when our processing or the legal situation changes. You can always find the current version on this page.