Privacy Policy

Overview

Trading Cats (the “Service”) is a paper (simulated) trading live-broadcast service. Browsing content is available anonymously without sign-in, and personal data is processed only minimally when you use the comment feature.

This policy describes only the items the Service actually collects and retains. Items not listed are not collected.

Personal data we collect

① Social login identifier: the account identifier and basic profile information received from the authentication provider on Google OAuth sign-in (stored in the auth system auth.users).

② Nickname: a display nickname derived from the social login profile (used when posting comments).

③ Comment data: comment body, author identifier, and timestamp (comments).

④ Report records: when a comment is reported, the reported comment, reporter identifier, and report time (comment_reports). Reports are kept private and used only for operational purposes.

There is no separate sign-up process and no direct collection of name, phone number, or address.

Purpose of processing

Social login identifier and nickname: sign-in authentication and identifying comment authors.

Comment and report records: community operation, moderation of inappropriate comments, and preventing duplicate reports.

Retention and use period

Personal data is retained while the member (account) is active; when the account is deleted, related data (profile, comments, report records) is cascade-deleted.

Where retention is required by applicable law, data may be kept for the corresponding period.

Processing entrustment and third-party provision

The Service processes data through the processors below, limited to what is necessary to achieve the processing purpose.

Supabase: database and authentication hosting.

Google: social login (OAuth) authentication.

Cloudflare Pages: static site hosting.

Google AdSense: ad display.

Cloudflare Turnstile: bot prevention (CAPTCHA) when posting comments.

The above third-party services (in particular Google AdSense, Cloudflare Turnstile, and Cloudflare Pages) may automatically collect and process cookies, IP addresses, and device information via your browser in the course of providing the service. Ad cookies can be managed or rejected in your browser settings or Google Ads settings.

Your rights

You may at any time request access to your information or delete your account. Deleting your account also deletes your profile, comments, and report records.

Browsing content requires no sign-in; personal data processing is limited to commenting (data minimization principle).

Contact

Inquiries about personal data processing can be directed to the Service operator. (A formal contact channel will be announced at launch.)