Privacy Policy

Effective Date: May 1, 2026

This Privacy Policy describes how TradeSport LLC, a Georgia limited liability company ("TradeSport," "we," "us," or "our"), collects, uses, and shares information about you when you use our platform, websites, and related services (collectively, the "Service").

This Policy is written in plain English. We want you to understand what we collect and why before you sign up.

1. Introduction

TradeSport operates a skill-based simulated trading competition platform. Running that platform requires us to collect some personal information, including identity verification data and trading activity. We try to collect only what we need, store it carefully, and use it only for the reasons explained here.

This Policy is incorporated by reference into our Terms of Service. If you do not agree with this Policy, do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Name, email address, phone number, and physical address
Date of birth (to confirm you are at least 18)
Username and password (stored as a salted hash, never in plain text)

2.2 Identity Verification (KYC) Data

To pay payouts and to comply with anti-fraud and regulatory requirements, we (through our identity verification partner, Sumsub) collect:

Government-issued photo ID (driver's license, passport, or national ID card)
A live photo or selfie used for biometric matching against your ID
A proof of address (utility bill, bank statement, or similar)
The verification result and risk signals returned by Sumsub

2.3 Payment Information

Payments are processed by Stripe. TradeSport does not store your full card number, CVC, or bank account details. We receive limited information from Stripe, such as the last four digits of your card, the card brand, the cardholder name, and the result of the transaction.

2.4 Trading Activity

Through our broker integrations, we receive trading activity associated with your simulated accounts, including:

Trade entries and exits, sizes, and timestamps
Profit and loss, drawdown, and risk metrics
Account balances and equity curves
Connection logs from the trading platform

2.5 Affiliate and Referral Data

If you are an affiliate or were referred by one, we collect:

Unique affiliate codes and the links you have generated
Cookies that identify the referring affiliate (where applicable)
Attribution chain data (which affiliate is credited for which signup or sale)
Commission balances and payout history

2.6 Tax Information

If you are a U.S. taxpayer earning payouts or commissions, we collect tax form information (such as W-9 data: SSN or EIN, name, address, and signature). Tax identifiers are encrypted at rest using AES-256-GCM. We use this data solely to comply with tax reporting obligations.

2.7 Device, Network, and Fraud Signals

To prevent fraud, multi-account abuse, and account takeover, we collect:

IP address and approximate location (derived from IP)
Browser type, operating system, and device fingerprint signals
Login history and session metadata
VPN/VPS detection signals (used per the warning-first policy in the Trader Agreement)

2.8 Email Engagement

When you receive transactional or marketing email from us (sent via Resend), we collect engagement metadata such as opens, clicks, and bounce events. You can opt out of marketing email at any time (see Section 7).

2.9 Cookies and Tracking

See Section 5 for a description of the cookies we use.

3. How We Use Your Information

We use the information we collect to:

Create and authenticate your account, secure your sessions, and recover lost credentials
Verify your identity (KYC) as required for payouts and to meet anti-fraud and regulatory requirements
Process payments and payouts through Stripe and Stripe Connect
Operate the Service, including running competitions and challenges, calculating performance, and displaying leaderboards
Detect and prevent fraud and abuse, including multi-account schemes, hedging, copy trading, and feed-lag arbitrage
Provide customer support and respond to your questions
Comply with legal obligations, including tax reporting (such as 1099-NEC for users earning $600 or more in a calendar year), KYC, anti-money-laundering, and sanctions screening
Send marketing communications about TradeSport features, promotions, and competitions, where you have not opted out
Improve the Service through aggregated analytics about how users interact with the platform

4. Third-Party Service Providers

We share information with the following service providers solely to operate the Service. We ask each provider to protect data per applicable law and our agreements with them.

Provider	Role	What is Shared
Sumsub	Identity verification (KYC)	ID document, selfie, address proof, and verification metadata
Stripe	Payment processing and Stripe Connect payouts	Payment method, billing details, payout bank details
Resend	Transactional and marketing email	Email address, name, message metadata, engagement events
Supabase	Database hosting (Postgres)	All account data and trading data stored on our behalf
Upstash	Redis caching, job queues	Cached session and queue data
Vercel	Application hosting	Logs and request metadata for the application
Broker / data provider (to be announced)	Simulated trading platform and market data	Account ID, simulated trading activity, P&L

We may also share information:

With law enforcement or in response to legal process when required (subpoena, court order, or similar)
In connection with fraud investigation where we have a good-faith basis to believe fraud is occurring
In a corporate transaction, such as a merger, acquisition, or sale of substantially all assets, in which case the successor will be bound by this Policy or provide equivalent protections

We do not sell your personal information to third parties.

5. Cookies and Tracking

We use the following categories of cookies and similar technologies:

Essential cookies. Required for authentication and session management. Without these, the Service does not work. Examples: session cookies, CSRF tokens.
Functional cookies. Remember your preferences (language, UI settings).
Analytics cookies. Help us understand how users interact with the Service so we can improve it. Aggregated, not used to identify you individually for marketing.
Affiliate attribution cookies. Identify the affiliate, if any, who referred you to TradeSport. See the Affiliate Agreement, Section 3, for the attribution rules.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

6. Data Retention

We retain personal data for as long as your account is active and for a period after closure to comply with legal, tax, and audit obligations.

Account data: retained while active, plus up to 7 years after account closure for tax and regulatory compliance.
KYC documents and verification results: retained per applicable law, typically 5 years or longer, as required by anti-money-laundering and identity-verification regulations.
Trading data: retained for compliance, fraud investigation, and historical leaderboard accuracy.
Email engagement and analytics: retained for shorter periods, typically up to 2 years.

After the retention period, we delete or anonymize the data, unless we are legally required to retain it longer.

7. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

Right to access. Request a copy of the personal data we hold about you.
Right to correct. Ask us to correct inaccurate data.
Right to deletion. Ask us to delete your data, subject to legal retention requirements (we cannot delete tax records we are required to keep, for example).
Right to opt out of marketing. Unsubscribe from marketing email at any time using the link at the bottom of every marketing message, or by contacting us.
Right to data portability. Request a copy of your data in a portable format (CCPA/GDPR).
Do-not-sell rights (California residents). TradeSport does not sell personal data, so there is no sale to opt out of. We affirm this position regardless of whether a user makes a request.

To exercise any of these rights, contact mason@trade-sport.com. We will respond within the timeframes required by applicable law (typically 30-45 days).

8. Data Security

We take security seriously. Our practices include:

Encryption in transit (TLS) for all connections to the Service
Encryption at rest for sensitive fields (such as SSN, EIN, and broker passwords) using AES-256-GCM
Access control for internal systems, with role-based permissions and audit logging
Password hashing using industry-standard algorithms (we never store plaintext passwords)
Periodic review of access logs, vulnerability disclosures, and dependency updates

No system is perfectly secure. If we discover a breach affecting your data, we will notify you and the appropriate authorities as required by law.

9. Children's Privacy

The Service is for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it promptly. If you believe we have inadvertently collected data from a minor, contact mason@trade-sport.com.

10. International Data Transfers

TradeSport is based in the United States. If you access the Service from outside the U.S., you understand and consent to your data being transferred to and processed in the U.S., where data protection laws may differ from those in your country.

We rely on appropriate safeguards (such as standard contractual clauses where applicable) for international transfers required by law.

11. Changes to This Privacy Policy

We may update this Policy from time to time. The same retroactivity protection that applies to our Terms of Service also applies here. (See Section 6 of the Terms of Service.)

In short: any modification that reduces user privacy rights or adds material new data collection applies only to accounts created on or after the effective date of that modification. Active accounts continue to be governed by the version of this Policy in effect when they were created, until those accounts are closed. Modifications that improve user privacy protections or correct errors apply immediately to all accounts.

We will note the "Effective Date" and "Last Updated" dates at the top and bottom of this Policy when it changes, and we will notify active users of material changes.

12. Contact Us

For privacy questions, requests, or concerns, contact:

TradeSport LLC Email: mason@trade-sport.com Website: www.trade-sport.com

Last Updated: April 26, 2026