Privacy policy

This policy explains what personal data is processed when you use BuildTradr, for what purposes, on what legal bases, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and French data protection law.

The data controller is the publisher of BuildTradr (see the Legal notice). For any question about your data: [email protected].

We collect only the data necessary to run the service:

• Account: email address, password (stored hashed, never in clear text), the first and last name of your entrepreneur (a fictional identity you choose), time zone, and the dates of creation, email verification and last login.
• Game content: companies, economic operations and messages you exchange in the in-game messaging.
• Technical data: IP address and connection logs, for security purposes.

We use no advertising trackers and no third-party analytics tools.

• Providing the service (account creation and management, gameplay, messaging) — performance of the contract formed by the terms of use.
• Sending service emails (address verification, password reset, sign-in link) — performance of the contract. These emails, required for the account to work, are sent to you regardless of any marketing consent.
• Sending you communications about the game (news, updates) — consent, collected separately at sign-up and changeable at any time from your profile. These communications relate to the game only; your data is never sold or shared with third parties.
• Ensuring security and preventing abuse (logs, moderation) — legitimate interest.

Withdrawing your consent to communications has no effect on service emails and no consequence for your account.

Your data is hosted by OVH SAS, within the European Union. It may be processed by a technical email-delivery provider, solely to deliver service messages. We do not sell or rent your data, and do not share it with any third party for other purposes.

No data is transferred outside the European Union.

• Unverified account: automatically deleted within 24 hours if the email is not verified.
• Active account: kept for as long as the account exists, then deleted at your request or after a prolonged period of inactivity.
• Communications consent: kept, together with its date, for as long as the account exists, in order to record your choice and any change to it.
• Email invitations (referrals): only a non-reversible fingerprint of the recipient’s address is kept, for 24 hours, to prevent duplicate sends; the address itself is never stored.
• Technical logs: kept for up to 12 months.

BuildTradr uses only strictly necessary or preference cookies, which are exempt from consent: a session cookie (login), an anti-CSRF token (security), an optional “stay logged in” cookie, and storage of your display theme. Some preference information may also be stored locally in your browser (theme, dismissed banners).

No advertising or tracking cookie is set, so no consent banner is required.

Passwords are hashed with a robust algorithm (Argon2id) and are never accessible in clear text. Exchanges with the site are encrypted (HTTPS).

You have the right to access, rectify, erase, restrict and object to the processing, as well as the right to data portability. You may exercise them at any time by writing to [email protected].

You may also lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).

The service is not intended for people under 15. A minor under 15 may not create an account without the authorisation of the holder of parental authority.

This policy may be updated. The last-updated date appears at the top of this page; significant changes will be brought to your attention.