Privacy Policy

You give us, when you join the waitlist: your email address, a display name, and optionally your X/Twitter handle, Discord username, years of trading experience, and a short note about why you want a spot.

If you are accepted into the contest and create an account, we also process the content you submit: trading journal entries, chart screenshots you upload, paper-trading activity, and the scores derived from them.

We collect automatically, for security and fraud-prevention: your IP address, browser and device characteristics (user-agent, screen, timezone and similar signals), and basic page-visit logs. These are used to detect duplicate accounts and abuse — a contest with a cash prize requires it.

• To operate the waitlist and the contest, and to review applications.
• To contact you about your application — to send your invite code or a decision. We do not send marketing newsletters.
• To grade submissions and produce scores and standings during the contest.
• To prevent fraud, multi-accounting, and abuse, and to keep the platform secure.
• To operate, debug, and improve the service.

Where the GDPR or UK GDPR applies, we rely on your consent (joining the waitlist), performance of a contract (running the contest you entered), and our legitimate interests(preventing fraud and securing the platform). You can withdraw consent at any time — see “Your rights” below.

We do not sell your personal data. We share it only with service providers who process it on our behalf:

• Supabase — database and authentication hosting (data stored in Singapore).
• Vercel — application hosting and delivery (United States).
• Cloudflare Turnstile — bot and abuse protection on our forms.
• Discord — our community platform, if you choose to join it.
• Sentry — error and performance monitoring.
• Anthropic — AI processing of contest submissions (for accepted participants).

We may also disclose data where required by law, or to protect our rights, users, or the integrity of the contest.

Your data is processed in Singapore (Supabase) and the United States (Vercel and other providers above). Where required, transfers rely on appropriate safeguards such as the providers’ standard contractual clauses.

We keep waitlist data for as long as needed to run the current cohort and evaluate applications, and contest data for the duration of the contest and a reasonable period afterward for records, disputes, and prize administration. We apply automated retention and purge processes to personal data we no longer need, and you can request deletion at any time.

We use only the cookies needed to run the site — to keep you signed in and to operate security features such as Turnstile. We do not use third-party advertising or cross-site tracking cookies.

Depending on where you live (including under the GDPR, UK GDPR, and CCPA), you may have the right to access, correct, or delete your data, to object to or restrict certain processing, to withdraw consent, and to data portability. We will not discriminate against you for exercising these rights.

To make a request, email privacy@bankrolltheory.com. We will respond within the timeframe required by applicable law.

We protect your data with encryption in transit, access controls, row-level database security, and abuse monitoring. No system is perfectly secure, but we work to safeguard your information and to respond promptly to any incident.

Bankroll Theory is intended for adults (18+). It is not directed at children, and we do not knowingly collect data from them.

We may update this policy as the product evolves. Material changes will be reflected by the “last updated” date above, and where appropriate we will notify you.

Questions or requests about your data: privacy@bankrolltheory.com.