Privacy policy
Last updated: 13 November 2026
1. Who is responsible
TapeArena is a personal project in its alpha phase: free and without advertising for now. There is no company behind it, there is a person. The controller of your data is Joaquín Poudereux Mozas, the owner of the project. For anything about your data write to soporte@tapearena.com.
2. What data we process, why and for how long
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Account: e-mail, nick, country, language and the date you accepted the terms | Create and keep your account and send you the sign-in link | Performance of the service you ask for (art. 6.1.b GDPR) | While you have the account |
| Optional profile: strategy description, profile picture, time zone, date format and clock, e-mail alert for blocks | Personalise your experience. Your strategy description is public; only you see the picture | Your consent (art. 6.1.a) when you fill them in | While you have the account |
| Simulated trading activity: trades, orders, equity curve and Laboratory strategies | Provide the service and build the leaderboard. Your nick, country and trades (delayed by 1 hour) are public | Performance of the service (art. 6.1.b) | While you have the account. When you delete it, the trading account stays in the history with no name, country or anything that identifies you |
| Session and language cookies | Keep your session and your language | Needed for the service; no consent required | Session: 14 days. Language: 1 year |
| Service e-mails: sign-in link, acknowledgement of your messages and, if you ask for them, account-block alerts | So that you can sign in and be informed | Performance of the service (art. 6.1.b) | The log of sent e-mails, 90 days |
| News and results by e-mail: your e-mail and whether you receive them. They are on by default and we tell you on the sign-up form | Tell you about new TapeArena seasons and tools and the standings results. We only talk about TapeArena and never hand your e-mail to anyone | Legitimate interest in informing those who use the service about the service itself (art. 6.1.f GDPR and art. 21.2 LSSI, services similar to those you already use). You can object at any time | Until you turn them off (in My profile or with one click in any e-mail) or delete the account |
| Contact messages: e-mail, topic, text and IP | Answer your enquiry and prevent abuse of the form | Legitimate interest in answering you and protecting the service (art. 6.1.f) | 12 months |
| Questions to the help assistant (no data that identifies you) | Improve the documentation and the help | Legitimate interest (art. 6.1.f) | 90 days |
| Visit measurement without consent: anonymous daily counters (page, referrer, language, total reading time, use of each feature and approximate country) | Know how much the site is used. They carry no identifier or IP, so they cannot be tied to a person | Legitimate interest (art. 6.1.f); anonymous data | No limit (they are anonymous) |
| First-party analytics, only if you accept it in the cookie notice: random identifier, pages, time on each, actions, device, IP and approximate country | Improve the site and understand where visits come from | Your consent (art. 6.1.a), which you can withdraw in “Cookie settings” | 13 months |
| Use of your account while signed in: time on each page, actions (including the Laboratory) and «Surprise me» uses | Improve the service, apply the usage limits and understand which features matter | Legitimate interest (art. 6.1.f). You can object by writing to us | 13 months; deleted with your account |
| Bot learning (optional): the strategies you mark and the «Surprise me» results, without your name or e-mail | Let the learning bots use your ideas in future seasons | Your consent (art. 6.1.a), which you can withdraw whenever you want | Until you withdraw it or delete the account (it is then deleted) |
| Technical server logs: IP, date and requested address | Security and operation of the service | Legitimate interest (art. 6.1.f) | Rotated automatically by the system (a few weeks) |
We do not use Google Analytics or any third-party tool to measure visits, we show no advertising and we do not sell or hand over your data.
3. Who sees your data
- Public: your nick, your country (the flag), your strategy description if you write one, and your trades and equity curve on the leaderboard, delayed by 1 hour. Your e-mail, profile picture and Laboratory strategies are not public.
- OVH: host the server and the mail. The server is in Beauharnois (Quebec, Canada). Canada has a European Commission adequacy decision, so the transfer has GDPR safeguards.
- Cloudflare: only manages the DNS (the address of the site); the traffic of the site does not go through them.
- DB-IP: IP-to-country database we look up on our own server; no data is sent.
4. Your rights
You can access your data, correct it, delete it, restrict its use, ask for a portable copy and object to a processing, and withdraw whenever you want the consents you gave (without affecting what was already done). You can do almost everything yourself from My profile: edit your data, remove the picture, untick the permissions and delete your account and data. For anything else write to soporte@tapearena.com: we answer within one month at most. If you think we do not handle your data properly you can complain to the Spanish Data Protection Agency (www.aepd.es).
5. Cookies
Which cookies we use and how to change your choice is on the Cookies page.
6. Minors and security
The service is for adults. We protect the data with an encrypted connection (HTTPS), single-use sign-in links (no passwords to steal), backups and an admin panel reachable only through a private network.
7. Changes
If we change something important in this policy we will say so on the site and, if it affects you, by e-mail. The date above is the last revision. The Terms and conditions complete this text.