How we handle your data

PaperRush is a paper trading simulation platform for educational and entertainment purposes. No real money is invested or at risk. This policy explains how we collect, use, and protect your information.

For a category-by-category breakdown of what we monitor, why, who sees it, and how long we keep it, see the Transparency Register. If something is not on that list, we do not do it.

Account information: When you sign in through PR Works Auth, we receive your name, email address, and profile photo. We store this to identify your account.

Profile data: Username, avatar, trading style, risk archetype, option approval level — all provided voluntarily by you.

Trading data: Paper trades, scenarios, watchlists, limit orders. This is all simulated — no real financial data.

Usage data: Pages visited, features used, and error logs to improve the app. We use Sentry for error monitoring.

Feedback: Bug reports and feature requests submitted through the /feedback page.

Mirror data (retired feature): The Mirror (digital twin) has been removed. If you used it before, the transcripts, conversation history and personality traits you saved are kept encrypted at rest using AES-256-CBC. They are included in your data export and deleted when you delete your account.

We use your information to:

• Provide and personalize the paper trading experience
• Generate AI coaching insights (your data is sent to your chosen AI provider)
• Monitor and fix errors (Sentry)
• Respond to feedback and support requests
• Enforce rate limits and prevent abuse

We share data with these services to operate the platform:

• Vercel — hosting and serverless functions
• Neon — PostgreSQL database
• Stripe — subscription billing (if you subscribe to Pro/Premium)
• Sentry — error monitoring
• PR Works Auth — sign-in with a passkey or email link
• AI providers — OpenRouter, Gemini, Groq, etc. (when you use AI features, your prompt and market context are sent to the selected provider)

We do not sell your personal information to anyone.

Essential cookies: Session authentication (Auth.js). Required for the app to work.

Preferences: UI settings, cost basis method, display preferences stored in localStorage.

Analytics: Only with your consent via the cookie banner. Used to understand feature usage and improve the product.

We keep your account data as long as your account exists. If you delete your account, we remove your personal data within 30 days. Anonymized, aggregated analytics data may be retained.

You can:

• Access your data — your profile, trades, and activity are visible in the app
• Update your data — edit your profile in Settings at any time
• Delete your account — use the “Delete Account” option in Settings to permanently remove your data
• Withdraw cookie consent — clear your browser cookies or use the cookie banner preferences
• Contact us — submit a request through the feedback form

For EU residents: you have additional rights under GDPR including data portability and the right to object to processing. Contact us through the feedback form to exercise these rights.

PaperRush is not intended for users under 13. We do not knowingly collect data from children.

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the platform after changes constitutes acceptance.