What we know, exactly.
01What we collect
Three categories, nothing hidden:
Account — if you sign in with Google: your name, email address, and avatar, plus the session records needed to keep you signed in. Paper-trading state — your simulated account (balance, positions, orders, history, journal notes), watchlists, and saved setups, synced so your other devices see them. Product events — things like "page viewed," "order submitted," "bot run," with a random device identifier, so we can understand which features matter and improve them.
what this means · a Google profile if you sign in, your paper-trading state so it can follow you across devices, and product events so we can see what's used. That's the whole list.
02What we never collect
We take no payments today, so we hold no payment data. We never ask for and never store card numbers, bank details, tax or government identifiers, or credentials to any real brokerage. Signed out, your paper account lives only in your browser's localStorage and never reaches our servers.
what this means · no card numbers, no bank accounts, no government IDs, no real brokerage anything. The product is paper-only, so the data is too.
03Where it lives
Server-side data is stored in MongoDB Atlas. Client-side, we use localStorage for your practice account, preferences (like data mode), and the anonymous device id — plus the cookies Google sign-in requires for your session. Market quotes are proxied through our servers from Yahoo Finance; your name and email are not part of those requests.
what this means · a MongoDB Atlas database and your own browser. Quotes are fetched from Yahoo by OUR servers — your identity is not forwarded to data providers.
04What we do with it
We use your data to operate the features you use (sync, sign-in), to debug problems, and — via aggregate product events — to decide what to build next. We do not sell or rent personal data, and we run no third-party advertising trackers. The only parties that touch data are the infrastructure providers that host it (e.g. our database and hosting) and Google, which handles the sign-in itself.
what this means · run the product, fix the product, improve the product. We don't sell data, we don't run ad trackers, and we don't share it except the infrastructure that hosts it.
05How long, and how to leave
Account data is kept while your account is active. To delete your account and everything attached to it, email hello@lazybull.us from your sign-in address and we will remove it. Signed-out practice data can be cleared any time via your browser's site-data controls (or the in-app reset button).
what this means · data stays while your account is active; email us and we delete the lot. Signed-out data is yours to clear from your own browser.
06Changes and contact
If this policy changes materially, the effective date above changes with it. Questions, requests, or complaints: hello@lazybull.us. The service terms live in the terms ledger.
what this means · material changes move the effective date at the top. Same address for every question.