Your data, handled deliberately.
This draft describes this sandbox’s current behavior. The data-controller identity, legal bases, transfer safeguards, statutory rights and contact details require professional review before live launch.
What the sandbox stores
Registration stores your name, email, hashed password and verification status. Sessions and abuse-protection records support secure access. Profile preferences, simulated purchases, accepted terms, account decisions, payout requests and support tickets support the workflows you choose to use.
The sandbox does not accept identity documents or real financial credentials. Do not upload real KYC documents, bank details, payment-card information or wallet secrets.
Optional first-party analytics
Analytics run only when you allow them. They use a random visitor identifier rather than invasive fingerprinting. We record page paths, events, UTM source/campaign and coarse device category. We do not infer precise geography. A heartbeat within 90 seconds defines “currently online.”
Analytics records expire after 90 days. You can change your analytics preference in the footer; declining deletes records for the current visitor ID. Sandbox financial activity is excluded from live revenue reporting.
Retention, export and deletion
Verification and reset mail in the protected sink expires after two hours. Authentication tokens expire according to their stated limits. Financial and audit history is append-only for integrity. A live retention schedule and lawful deletion/anonymization procedure require approval.
Request an export or deletion review through a support ticket. The operator must verify identity, export only the requesting user’s records, and assess any applicable retention requirements before deletion. This release does not promise automated deletion of immutable financial history.
Security and service providers
Passwords are hashed by Better Auth. Sensitive server settings are outside public bundles and version control. Administrator access requires authenticator MFA and a permitted server role. Verification mail is encrypted when SMTP is unavailable.
Approved live KYC, payment, trading and email providers, their processing locations and agreements remain to be selected. This draft must be completed before collecting real financial or identity data.