PLAIN LANGUAGE. CLEAR EXPECTATIONS.

Privacy policy

Last updated October 13, 2026. Simulated trading. Not real money. Not a brokerage. Not investment advice.

What we collect

We collect your email, password hash, display name, and usage events. Your password is hashed; we do not store it as readable text. When you sign up we record that you confirmed you’re 18 or older and which version of these policies you agreed to. We don’t ask your birth date. Practice orders, point transfers, feedback, survey answers, and reward interest are stored to make the app work and understand demand. If a friend sends points to your email address before you have an account, we keep only a scrambled code of that address (a one-way hash), never the address itself, with the gift for at most about 8 days: it’s deleted when the gift reaches your new account or goes back to your friend.

What other players can see

The weekly board shows your display name, rank, weekly score, return percentage and number of trades, unless you turn it off in Settings. Players you duel or send points to see your display name, and a friend you send points to also sees the message you write with them. If you join a club league, its members see your display name and your standings in the club (rank, weekly score, season score, return percentage and number of trades), even if you’ve turned off the weekly board; leaving the club takes you off its boards.

Optional questions, surveys and interviews

Some screens ask optional questions: your top three rewards, whether an example rate feels fair, which donation setup you’d trust, or a short survey question. If you answer, we store the answer with your account. Anything you type, such as a program suggestion, is stored after we strip markup and invisible characters and shorten it to the length limit, so please leave out personal details. We use these answers only to decide what to build. Our staff may read individual answers to understand them; results are reported in totals.

If we link to a longer survey on another service (for example Tally, at tally.so), the link says so before you leave GreenLeague. That service processes your answers under its own privacy policy, and you choose what to share there.

If you give your email in one of our surveys (for example to claim a badge or offer a call), the survey service collects it for us. We use it only for what that question says, and you can unsubscribe or ask us to delete it at any time.

If you volunteer for a short interview, we store the contact address you give and use it only to arrange that conversation. We delete it within 90 days. We don’t record an interview unless you agree at the start.

How we measure interest

We assign a random visitor ID before signup and capture ad source parameters and landing-page variants. If a link has no ad tags, we note only the name of the site or ad network that sent you (for example “reddit” or “google”), never the full address or the ad click ID. A Google ad click ID stays in your browser tab and goes to Google only if you accept advertising cookies. Usage events identify you only by an account or visitor ID. Events do not include your email or display name: we keep only the fields our own pages send and drop anything that looks like an email address, including in ad link parameters. Your browser keeps the visitor ID and the first ad source in its local storage and in two of our own cookies (gl-vid and gl-ft, for up to 400 days), so a return visit isn’t counted as a new visitor. Both are removed when you clear this site’s data or delete your account; your recent searches stay until you clear this site’s data. Visits made before you sign up are stored under that visitor ID. When you sign in on a browser, we link that browser’s visitor ID to your account, so its earlier visits count as yours rather than as a new visitor. Free-text feedback and surveys are stored separately. If you use the contact form, the reply address you give (if any) is stored with your message and used only to answer it. If a page crashes, the app sends us an automatic report with the page path and the error, stored with feedback. While we test home-page headlines, a cookie remembers which one you were shown, for 30 days.

Security records

To stop password guessing and spam, we keep short-lived counters keyed by your IP address and, for logins, the email address typed into the form. They are deleted about a day after their time window ends.

Cookies and optional advertising tags

Essential cookies support login. Optional Google Ads and Reddit tags load only after you accept optional cookies, and never on gift-link pages. When they do, Google and Reddit receive that you visited a page, that a signup or an early-access answer happened, your IP address, and their own cookie and device identifiers, so we can measure our ads. Google gets only the page path. Reddit’s tag also reads the full page address, including ad link parameters, and the page you came from. Under some US state laws this counts as “sharing” or “selling” personal information for advertising. We never send your email, name, portfolio or points. You can opt out at any time with “Do Not Sell or Share My Personal Information” or Cookie settings in the footer, and we treat a Global Privacy Control or Do Not Track signal from your browser as an opt-out: with either one on, the ad tags don’t load.

Deletion and retention

Deleting your account removes your profile, portfolio, points, usage events (including the visits this browser made before you signed up), votes, survey answers and interview contact details from the application right away; database backups may keep them for up to 7 days before they expire. Some records belong to other players: if you sent someone points, their history still shows that gift, the display name you used then and any message you wrote with it. Feedback, contact messages and automatic crash reports are kept without your account attached. We don’t sell your personal information for money.

Service providers

Hosting and database providers process data to run GreenLeague. An external survey service (such as Tally) processes answers only if you choose to take a survey there. GreenLeague does not send email yet. No financial information is collected.

Contact

Privacy questions and data requests (access, correction or deletion): privacy@playgreenleague.com or the contact form. A person reads every message, and we respond within 45 days.