Privacy Policy
Last updated October 24, 2026. See also our Terms of Use.
What we collect
- Account details: your display name, username and email address, and a salted hash of your password (we never store the password itself).
- Sign-in providers: if you use Google or Apple, we receive an account identifier, your email address (Apple may give a private relay address) and your name. We don’t get your provider password.
- Passkeys: the public half of each passkey. Your biometrics and private keys never leave your device.
- Game activity: your token balance, positions, trades and a history of wallet events. Your username and trades appear on leaderboards and market activity feeds.
- Preferences and rewards: your avatar choice, theme, notification and email settings, promo codes you’ve used, and who invited you or whom you invited (usernames only).
- Age and email consent: when you confirmed you’re 19 or older and, if you opted in, when and where you agreed to promotional emails.
- Technical data: your IP address and browser or device type for security and rate limiting, and a session record so you stay logged in.
How we use it
To run the game, keep your account secure, send emails you request (confirmation and password-reset codes), send you account and security notices and the market results and refunds you choose to receive, send promotional emails if you opted in, prevent abuse and fix problems. We don’t sell your data and we don’t show ads or use third-party advertising or analytics trackers.
Who sees it
Other players see your display name, username and trading activity. Service providers that host the site and deliver the emails we send you process your data on our behalf and only to run Baystreeter. If you sign in with Google or Apple, that provider processes the sign-in you start with it.
Where your data is stored
Some of our service providers are based in, or store data in, the United States. Your information may therefore be processed outside Canada and may be accessible to courts and authorities in those countries under their laws.
Keeping and deleting
We keep your data while your account exists. You can delete your account from Profile, which permanently removes your personal data, positions and wallet. Backups may retain it for a short period before being overwritten. Logs older than 30 days are discarded.
Promotional emails
We send occasional new-market roundups and Baystreeter news only if you gave consent, either by ticking the box at sign-up or by turning on “News and offers” in Profile → Notifications. It’s optional and separate from creating an account. You can withdraw consent any time with the unsubscribe link in any promotional email (one click) or in Profile → Notifications. Account, security and market-result emails are not promotional. We keep a record of when and where you consented. We don’t sell or share your email address for others’ marketing.
Your choices
You can change your name and username in Profile, choose an avatar and theme, turn email notifications on or off, remove passkeys, log out of all other devices by changing your password, or ask for a copy of your data using the contact below.
Age limit
Baystreeter is for people 19 and older. It isn’t directed to anyone younger and we don’t knowingly collect their data; if we learn that we have, we’ll close the account.