PUBLIC BETA LEGAL
Privacy Notice
This notice explains what personal data StoxSim handles, why it is needed, and the choices available to you.
Effective and last updated: 21 October 2026
1. Who is responsible
StoxSim is operated from India by the owner of the StoxSim service. For privacy questions or requests, email support.stoxsim@gmail.com.
2. Data we collect
- Account data: display name, email address, password hash and email-verification status.
- Security data: session identifiers, user-agent details and account-security events.
- Simulator data: virtual accounts, watchlists, simulated orders, trades, holdings, ledger entries, saved scenarios and results, Scenario Lab credit usage, and saved weekly report snapshots.
- Learning data: XP, levels, check-in streaks, completed missions and unlocked achievements.
- Competition data: season entry values, percentage returns, valuation freshness and private-league memberships. Campus records include affiliation requests, review notes, membership roles, competition entries and moderation actions.
- Communication preferences: whether weekly reports are enabled and the delivery timezone you select.
- Product activity: your account ID, UTC day, first occurrence time and category of signed-in activity, stock research, watchlist additions, standard paper-order submissions/executions, successful Finwiz answers, completed Scenario Lab runs, and Learning Path or Competitions visits. We keep one marker per category per day. These activity markers contain no stock symbols, search text, Finwiz prompts, order payloads or session replay.
- Technical data: service logs, request timing, IP-derived security signals and error diagnostics.
- Communications you send to our support or privacy addresses.
We do not ask for brokerage credentials, bank details or payment-card data.
3. Why we use it
- Provide and secure your account and paper-trading portfolios.
- Send email verification, password-reset and essential security messages.
- Send optional weekly portfolio learning reports only when you explicitly enable them.
- Record educational progression and prevent duplicate mission or achievement awards.
- Operate optional learning competitions. When you opt in, your display name, entry-relative percentage return, join time and valuation freshness are visible in that season's standings. Private-league standings are visible only to league members.
- Verify and manage campus membership. Campus organizers and platform administrators can see your membership request, display name, email and affiliation note. Verified institution names and domains are searchable by signed-in users. Campus enrollment is optional and separate from global enrollment: only campus members and platform administrators can see your campus display name, percentage return, entry time and valuation freshness. Your portfolio balance stays private.
- Detect abuse, enforce rate limits, troubleshoot failures and protect the service.
- Meet legal obligations, respond to valid requests and establish or defend legal claims.
- Measure aggregate active learners, onboarding completion, feature usage and return-day retention to improve the learning experience. Product activity stays within StoxSim; no third-party analytics cookies are added.
- Improve reliability using aggregated or de-identified operational information.
Registration requires your clear agreement to the Terms and consent to the processing needed to provide StoxSim. You may withdraw consent by deleting your account, although limited records may be retained where law or security requires it.
4. Sharing and service providers
We use infrastructure, email-delivery, database, cache, logging and market-data providers to operate StoxSim. They receive only the information reasonably needed for their role. We may also disclose information when legally required, to protect users or the service, or as part of a business transfer with appropriate safeguards. We do not sell personal data.
5. International processing
Some providers may process data outside your state or country. Where required, we use contractual and technical safeguards and assess applicable transfer restrictions.
6. Retention and security
Product activity covers the latest 180 UTC dates and is removed in scheduled batches after expiry. It is included in your account export and deleted with your account. Campus requests and entries are included in your export and removed when you delete your account. You can cancel pending requests, leave your institution or withdraw from a competition; withdrawal is final for that competition. Withdrawn entry baselines remain stored while your account exists to prevent re-entry resets. Campus moderation actions remain with account references cleared on deletion. Account and simulator data is kept while your account is active. Security and backup records may remain for a limited period after deletion to protect the service and meet legal requirements. Passwords are stored as hashes, refresh tokens are hashed and rotated, and production traffic is intended to use HTTPS. No system can guarantee absolute security.
7. Your choices and rights
Account settings let you update your profile, change your password, review or revoke sessions, export your account data and request permanent deletion. Depending on applicable law, you may also request access, correction, erasure or grievance handling. Email support.stoxsim@gmail.com from your registered address. We may need to verify your identity before acting.
8. Children
StoxSim is not intended for anyone under 18 or below the age of legal majority where they live. Do not create an account for a child.
9. Changes
Material changes will be dated on this page and, when appropriate, communicated in the service or by email. A new consent may be requested when a change materially affects how personal data is used.