1The short version#
- We collect what an account needs: a sign-in identifier from Apple or Google (or a public wallet address on the website), a username and display name, and the paper trades and activity you create.
- We do not store your email address in readable form. We keep a one-way hash of it, which we use to recognise the same account, not to contact you.
- We do not use advertising, ad tracking, or analytics SDKs, and the iPhone app does not track you across other companies’ apps or websites.
- We never see or store your card details, Apple Account password, private keys or any real funds.
- We do not sell your personal information or share it for advertising.
- Your username, rankings and results are visible to other people. Section 5 lists exactly what is public.
- You can delete your account, and the data attached to it, from the app in a few taps.
2Who is responsible for your data#
ZEVRON LLC, a Florida limited liability company, is the controller of the personal data described here, and runs the Cooked Paper iPhone app, the cooked.trade website, and the servers behind them (the “Service”). Questions and requests about your data go to support@cooked.trade. This policy is part of our Terms of Service, which also explain what Cooked is.
3What we collect#
| What | Details | Where it comes from |
|---|---|---|
| Sign-in identifiers | The unique ID Apple or Google gives us for you, and a one-way (SHA-256) hash of your email address. For wallet sign-in on the website, your public wallet address. We do not store your email in readable form or your provider access tokens. We keep an encrypted Apple token only so that we can revoke the Apple sign-in link when you delete your account. | Apple, Google, or your wallet, when you sign in |
| Profile | A username (we generate a random one until you choose), a display name (starting from the name Apple or Google provides, which you can edit), an optional bio, and an avatar that is generated from a seed, not uploaded. | You, and Apple or Google at first sign-in |
| Your activity | Paper portfolios, trades and leveraged positions, watchlist, price alerts, achievements, season results, duels and leagues you join or create (including names you give them), daily-call picks, sentiment votes, follows, and on the website, posts and reactions. | You, as you use the Service |
| Session and device data | A hash of each sign-in token, the time it was created and last used, your device’s user-agent string, a hash of your IP address, and your app version. If you allow notifications, your push token (Apple’s notification token on iPhone, or a browser push subscription). | Your device and app |
| Subscription records | Your App Store transaction identifiers, which plan you hold, its expiry and renewal state, and whether it was refunded or revoked. We do not receive your payment method or Apple Account details. | Apple (via StoreKit and Apple’s server notifications) |
| Technical logs | Request time, route, response status and duration, plus your IP address, which our network provider and servers see when you connect. Authorization headers, cookies and signatures are removed from our logs. Error reports, if enabled, exclude headers, cookies and request contents. | Our servers and network provider |
| Messages to us | What you send to support@cooked.trade, including your address and the contents of the message, and for removal requests the details you include. | You |
| Waitlist | The email address you give the launch waitlist, where it came from on our site, and an optional referral code. Kept apart from accounts. | You |
Market data. Token prices, charts and details come from third-party data providers about the market, not about you. Your account details are not sent to them.
4What we deliberately do not collect#
- Payment card or bank details, or any real funds, tokens or private keys. A wallet signature on the website proves you control an address and nothing more.
- Your precise or coarse location, contacts, photos, microphone, camera, health data or browsing history.
- Your date of birth, government ID or phone number.
- Advertising identifiers. The app does not use Apple’s advertising identifier, does not ask for tracking permission, and has no advertising or third-party analytics SDKs.
5How we use it, and what other people can see#
We use personal data to run the Service: to create and secure your account, keep your portfolio, calculate rankings, send the alerts and notifications you ask for, confirm your subscription, answer you, prevent cheating, abuse and fraud, keep the Service reliable and secure, and meet legal obligations. We do not use it for advertising, we do not build advertising profiles, and we do not make decisions about you that have legal or similarly significant effects.
7Public on-chain data, and getting a wallet removed#
The website can show information drawn from the public Solana blockchain, such as the activity and computed performance of a wallet address. That data is public whether or not Cooked exists, and the owner does not need an account. A wallet address on its own is not your name, but it can sometimes be linked to a person.
If an address that is yours appears on Cooked, you can have it removed at /legal/takedown. It needs no account and no reason, and we aim to act on it within 72 hours. Removal stops us displaying the address; it cannot erase the blockchain or copies others have made.
8Why we may process it (GDPR and UK GDPR)#
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:
- Contract: to create your account, run the Service you asked for, and confirm your subscription.
- Legitimate interests: to keep the Service secure, prevent cheating and abuse, fix faults, and publish rankings, which are a core part of the product. You can object to this at any time, as set out in section 11.
- Consent: for optional push notifications, which you can switch off at any time in your device settings.
- Legal obligation: where the law requires us to keep or disclose something.
Our servers are in the United States. Where we transfer personal data from the EEA, the UK or Switzerland, we do so using safeguards the law recognises, such as the European Commission’s standard contractual clauses, where the recipient does not already provide an adequate level of protection.
9How long we keep it#
| Data | How long |
|---|---|
| Account, profile, portfolios, trades, alerts, and activity | Until you delete your account, then removed from our live systems straight away |
| Sign-in sessions | Until they expire (up to 30 days), you sign out, or you delete your account |
| Subscription records | While your account exists; deleted with it. Apple keeps its own records of your purchases. |
| Server logs | A short rolling period, in the order of days, after which they are overwritten |
| Backups | Encrypted backups are rotated out on a schedule of up to about 8 weeks, so deleted data can remain in them until then. It is not restored into the live Service except to recover from a failure, and deletions are re-applied if it is. |
| Waitlist email | Until you ask us to delete it, or until we have contacted the waitlist about launch and you have not joined |
| Messages to us | As long as needed to deal with them and for a reasonable time after, to protect ourselves against disputes |
One exception: if you published “calls” on the website, which are public, permanent predictions, they cannot be rewritten after the fact. If you delete your account, they stay public under an anonymous “deleted” username and are no longer linked to your profile.
10Deleting your account#
In the iPhone app, open Settings and choose Delete account. You will be asked to confirm. Deleting removes your account, profile, sign-in records, push tokens, paper portfolios and trades, alerts, watchlist, achievements, duels and league memberships, posts and reactions, and subscription records, and revokes the link between your Apple sign-in and Cooked. Leagues you created pass to another member where there is one.
Deleting your account does not cancel an App Store subscription. Cancel it with Apple (Settings → your name → Subscriptions) to stop being billed. If you cannot use the app, email support@cooked.trade from the address linked to your sign-in and we will delete the account for you.
11Your rights and choices#
Depending on where you live, you may have the right to know what we hold about you, to get a copy of it, to correct it, to have it deleted, to object to or limit certain uses, to move it to another service, and not to be treated differently for using these rights. We apply the same choices to everyone, wherever they live.
- Access and copies: email support@cooked.trade. There is no download button yet, so we collect what we hold about your account and send it to you by email.
- Correct: edit your username, display name and bio in the app at any time, or ask us to fix anything else.
- Delete: in the app, as described in section 10, or by email.
- Notifications: turn them off in iOS Settings → Notifications → Cooked, or delete the alerts that trigger them.
- Object or restrict: email us. Where we rely on legitimate interests, we will stop unless we have a compelling reason that overrides your interests, or need the data for legal claims.
- Withdraw consent: where we rely on consent, you can withdraw it any time, and doing so does not affect what we did before.
Send requests to support@cooked.trade from the address linked to your account, or with enough information that we can identify you. We reply within 30 days, and tell you if we need longer, which the law allows for complex requests. You can appoint an authorised agent to act for you, and we may ask them for proof. If we refuse a request, we will tell you why, and you can ask us to reconsider by replying to us. You also have the right to complain to your data protection authority or, in the United States, to your state attorney general.
For California and other U.S. state privacy laws: in the last 12 months we collected the categories of personal information in section 3 (identifiers, internet or app activity, commercial information in the form of subscription records, and account content) for the purposes in section 5. We do not sell personal information or share it for cross-context behavioural advertising, we do not knowingly process the data of people under 18, and we do not use or disclose sensitive personal information to infer characteristics about you.
13Security#
We protect your data with measures that include encryption in transit, storing sign-in tokens and email addresses only as one-way hashes, encrypting the one Apple token we keep, automatic sign-out of all sessions if a stolen sign-in token is reused, rate limiting, and restricting who can reach our systems. No system is completely secure, and we cannot guarantee the security of your data. If something affects your personal data in a way that the law requires us to tell you about, we will. To report a vulnerability, email support@cooked.trade.
14Children#
Cooked is for people 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has an account, tell us at support@cooked.trade and we will delete it.
15Automated processing#
Rankings, season tiers and achievements are calculated automatically from simulated results, and have no legal or similarly significant effect on you. We may use automated tools to help spot abusive content, spam and cheating, and a person reviews a decision to suspend an account where you ask us to.
16Changes to this policy#
We will update this policy when our practices change, and change the version and date at the top. For changes that matter, such as a new kind of data or a new use of it, we will tell you in the app, on the website, or by email before they apply, and where the law requires your consent, we will ask for it.
17Contact#
Privacy questions, requests and complaints: support@cooked.trade. General support: support@cooked.trade. Security reports: support@cooked.trade. We are ZEVRON LLC, a Florida limited liability company.
Questions about this document? Write to support@cooked.trade.