Interim notice: This policy is published for our pre-launch email waitlist while our company is being formed and our counsel completes a review. We will update it with our formal company details once incorporation completes.
This Privacy Policy explains how we collect, use, and protect personal data when you use the Trade Royale websites and game (the “Services”), and the rights you have. Controller: Trade Royale (the operator of the Trade Royale websites and game). Privacy contact: contact@traderoyale.com.
Personal data we collect
- Waitlist: your email address and a consent timestamp (we use confirmed, double opt-in).
- Game account (if you create one): email, username, country, and a securely hashed password.
- Gameplay: matches, results, statistics, and progression.
- Acquisition: how you reached us (e.g., UTM source/medium/campaign, referrer).
- Technical: data our infrastructure and security providers process to deliver and protect the Services (e.g., IP address, device/browser info, error diagnostics).
We do not collect special-category data and we do not process payments (there are no purchases).
How we use data and our legal bases
- Run the waitlist and (later) your account — performance of a contract.
- Security, anti-cheat, and fraud prevention — our legitimate interests.
- Privacy-friendly, cookieless analytics — our legitimate interests.
- Marketing and waitlist emails — your consent (double opt-in); you can unsubscribe anytime.
- Legal compliance and enforcing our terms — legal obligation / legitimate interests.
Cookies
We do not use advertising or cross-site tracking cookies, and our analytics is cookieless. Sign-in (in the game) uses a token in your browser’s local storage, and our security provider may set strictly-necessary cookies. See our Cookie Policy.
Service providers
We share personal data only with providers who process it on our behalf under contract: Vercel (website hosting and cookieless analytics), Resend (email delivery), Sanity (content management), and — for the game — Cloudflare (security), Sentry (error monitoring), and DigitalOcean (hosting). We may also disclose data to comply with law or protect the Services.
International transfers
Some providers are located outside your country, including the United States. Where we transfer personal data internationally we rely on appropriate safeguards such as the EU Standard Contractual Clauses (and the UK Addendum).
Retention
We keep personal data only as long as necessary for the purposes above, then delete or anonymize it. Waitlist data is kept until you unsubscribe or we close the list.
Your rights
Subject to applicable law, you can access, correct, delete, restrict, or port your personal data, and object to or withdraw consent for certain processing.
- To exercise any right, email contact@traderoyale.com.
- Unsubscribe from marketing using the link in any email.
- If you create a game account, you can delete it (and your personal data) yourself from Settings.
- You may also lodge a complaint with your local data protection authority.
Children
The Services are intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided data, contact contact@traderoyale.com and we will delete it.
Security
We use technical and organizational measures including password hashing, transport encryption, and a security layer to protect personal data. No method is completely secure.
Changes and contact
We will post updates here and, for material changes, provide additional notice. Questions or requests: contact@traderoyale.com.