Privacy Policy

1. Controller

The data controller is Deciqor s.r.o., Czech Republic. Contact: legal@deciqor.com.

2. Data we collect

Depending on how you use Deciqor, we may process:

• Account & identity: email address, name or display name, username, country, and related profile fields you provide.
• Trading activity: simulated trades, balances, challenge progress, DQS-related aggregates, and technical logs tied to your session.
• Security & fraud prevention: IP address, approximate location, device and browser characteristics, and similar signals used to detect abuse (sometimes referred to as a device “fingerprint” in a broad sense).
• Payments & payouts: billing identifiers processed by our payment provider; payout details you submit for eligible withdrawals.
• Communications: support messages and email delivery metadata.

3. Purposes of processing

• Providing and improving the evaluation platform.
• Authentication, security, fraud prevention, and enforcing our Terms and Program Rules.
• Processing fees, verifying eligibility, and executing approved payouts.
• Complying with legal obligations and responding to lawful requests.

4. Retention

We retain account and challenge data while your account is active and for a limited period afterwards to meet legal, tax, and dispute-resolution needs. As a general guideline, core account records may be kept for up to two (2) years after the account becomes inactive unless a longer period is required by law. Logs may be kept for shorter periods.

5. Processors and third parties

We use reputable service providers who process data on our instructions, including where applicable:

• Supabase — database, authentication, and application backend.
• Stripe — payment processing.
• Resend — transactional email.
• Vercel — hosting and edge delivery.

Sub-processors may change; material updates will be reflected in this policy or notified where appropriate.

6. Your rights (GDPR)

Subject to EU/UK GDPR and local law, you may have the right to: access, rectification, erasure, restriction of processing, data portability, objection to certain processing, and withdrawal of consent where processing is consent-based. You may also lodge a complaint with a supervisory authority (see GDPR Notice).

To exercise rights: legal@deciqor.com. We may need to verify your identity before responding.

7. Cookies

We use essential cookies and similar technologies required for authentication, security, and basic site operation. We do not use non-essential advertising cookies on the core product as described here; if that changes, this section will be updated and, where required, consent will be obtained.

8. International transfers

Providers may process data in the EU, UK, US, or other regions. Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses where applicable.

9. Contact

Privacy questions: legal@deciqor.com