Privacy Policy

Last Updated: April 10, 2026

      TL;DR: Most of your data stays on your device (localStorage). We collect minimal analytics with your consent. We never sell your data. We never share it with advertisers. Payments are processed by Paddle — we never see your card number.
    

1. Introduction

Abu Terminal ("we", "us") respects your privacy. This policy explains what data we collect, how we use it, and your rights. Abu Terminal is an educational market replay simulator committed to minimal data collection.

2. Data Stored on Your Device (NOT sent to us)

The majority of your data never leaves your device:

Profile information (name, age, gender — if voluntarily provided)
Trading simulation data (virtual portfolio, trade history)
Preferences (theme, language, UI settings)
Game progress (scores, achievements, badges)
Chat history with the AI assistant
Watchlists and custom configurations

This data is stored in your browser's localStorage. We do not have access to it.

3. Data We May Collect (with consent)

3.1 Anonymous Analytics

If you grant consent via the cookie banner, we collect anonymous usage analytics (PostHog) to improve the product: pages visited, features used, session duration. No personal identifiers are attached.

3.2 Authentication

If you sign in with Google, we receive your email address and display name from Google OAuth. This is used solely to identify your account and determine your subscription tier.

3.3 Leaderboard

Daily Scene leaderboard entries are anonymous. We store: an auto-generated handle (e.g., "Silent Fox #4721"), your score, archetype, and country (derived from timezone, not IP). No personally identifiable information.

3.4 Payments

Payments are processed by Paddle.com (Merchant of Record). Paddle collects your payment information directly. We never see, store, or process your credit card number. See Paddle's Privacy Policy.

4. Data Retention

Browser data: persists until you clear your browser storage
Leaderboard entries: auto-deleted after 90 days
Analytics: aggregated, no individual profiles retained beyond 90 days
Account data: retained while your account is active; deleted on request

5. Your Rights (GDPR + CCPA)

You have the right to:

Access — request a copy of your data
Delete — request deletion of your account and associated data
Portability — export your data (available in-app)
Withdraw consent — opt out of analytics at any time via Settings
Object — object to data processing

6. Children

Abu Terminal is not directed at children under 13. We do not knowingly collect data from children under 13.

7. Third-Party Services

Supabase — authentication and data sync (EU-hosted)
Paddle — payment processing (UK-based MoR)
PostHog — product analytics (EU-hosted, consent-gated)
Vercel — hosting (US-based)

8. Contact

For privacy inquiries: github.com/SayMyName676/abu-terminal