Privacy Policy

Papermarkets is operated by Mo Systems LLC, who decides what is collected and why. Write to mosystemsllc@gmail.com about anything on this page.

Signing in. Google is the only way in. When you sign in, our authentication provider Clerk receives your Google account email address, your name and your profile picture, and passes them to us. We store the email address (to identify your account and to reach you if we need to), your name, your picture, and Clerk's id for you. We never see your Google password, and we ask Google for nothing beyond your basic profile — not your contacts, calendar, files or anything else in your Google account.

Your account. The username you choose, your display name, the avatar you pick — we generate avatars ourselves from a style and a random seed, and we store those two so the picker can reopen where you left it — and whether you have finished onboarding, plus when the account was created and last changed.

What you follow. The market categories you pick during onboarding, so the feed can lead with what you care about.

How you play. Every simulated trade you place — market, outcome, direction, size, price and time — your open and closed positions, your virtual cash balance, how each position settled, which games you are in and which you created, your entry and rank in each monthly season, and a snapshot of your portfolio value taken about once a minute so the charts on your profile and portfolio have a history to draw.

The waiting list. Papermarkets ran a waiting-list form while it was in closed beta. That form is gone and we are no longer collecting for it, but we still hold what was given: an email address, a name and a note where they were supplied. Ask us and we will delete yours.

Server logs. Our API and the web server in front of it write an ordinary request log — IP address, what was requested, the response and how long it took. It goes to the server's console output, is capped and rotated away automatically, and is never loaded into the database or used to build a profile of you. We read it when something is broken.

We use PostHog to understand how the product is used — which pages people open, where they give up, and whether a feature is worth keeping. It runs in your browser and sends events to PostHog on our behalf.

What it records:

• Pages you visit inside Papermarkets, and roughly where in the world you are, derived from your IP address.
• A handful of named actions: signing in, finishing onboarding, creating or joining a game, and completing a trade. These record that the thing happened, not what you believe about a market.
• Errors the site hits in your browser, so a crash is something we find out about rather than something you have to report.
• Once you sign in, your account identifier, email and name, so we can tell one person's experience of a bug from everyone else's.

We do not record your screen. There is no session replay, no heatmap and no keystroke capture. Deleting your account stops anything further being linked to you, but events already sent to PostHog stay in their system under the identifier you had at the time — ask us and we will have them deleted there too.

There is no advertising here, no ad network, no tracking pixel, and no third-party JavaScript beyond the analytics described above and the sign-in widget. Nothing follows you to other sites.

We do not send email. There is no newsletter, no mailing system and no automated message of any kind; if you hear from us it is because a person wrote to you.

We do not sell, rent or trade your personal data, and we never will.

Papermarkets is a competitive game, so parts of your account are meant to be seen. Your profile page — /u/global/p/your-username — is readable by anyone with the link, signed in or not, and leaderboards show your username to everyone in that competition or game.

Public:

• Your username, display name and avatar.
• When you joined the season.
• Your rank, and whether it moved.
• Your portfolio value and your return.
• Your open positions, your closed positions and their profit and loss.
• Your recent trades — market, outcome, direction, size, price and time.
• Your portfolio value over time.

Not public:

• Your email address.
• Your uninvested cash balance — it would tell rivals exactly what you have left to spend.
• Your account's internal id.
• The categories you follow.
• Anything on the beta waiting list.

Profiles inside a private game are visible to that game's members only. Pick a username you are comfortable being seen under — it is how you appear everywhere, and search engines can index a public profile.

Cookies. Clerk sets the cookies that keep you signed in. They are strictly necessary — without them every page reload would sign you out. PostHog sets its own cookie to recognise the same browser across visits, so that two sessions by one person are not counted as two people. We set no advertising or cross-site tracking cookies, and nothing here follows you to another site.

Local storage. PostHog keeps its identifier here as well as in a cookie, so a browser is recognised even where cookies are cleared between visits. The rest is kept in your browser and never leaves it:

• The markets you recently opened from the search box, so the box can offer them back to you.
• A draft of a game you started creating but have not submitted, so a reload does not lose it.

Clearing your browser's site data for Papermarkets removes all three.

Everything above sits in one PostgreSQL database on a single server rented from DigitalOcean, in their NYC3 (New York, United States) region. The database is not reachable from the internet; it is bound to the server's own loopback interface and reached over an SSH tunnel by us. Traffic between your browser and the server is encrypted with TLS.

If you are outside that region — in the EU or the UK, say — your data is transferred there and stored there in order to give you the service you asked for.

Being plain about it: there are no off-site backups. Everything lives on that one server, so losing it would lose your account and its history rather than expose them. Do not treatPapermarkets as the only record of anything you care about.

We keep this list short on purpose. These are every third party involved in running Papermarkets:

• Clerk — authentication. Handles the sign-in flow and holds your email, name and profile picture, and your session.
• Google — the sign-in provider you authenticate with. Google knows you signed in to Papermarkets; its own privacy policy covers what it does with that.
• Polymarket and Kalshi — the sources of the markets, prices and resolutions, read through a data service we host ourselves. We send them nothing about you: they supply market data and receive no personal data in return.
• PostHog — product analytics. Receives the page views, named actions and browser errors described above, and once you sign in, your account identifier, email and name.
• DigitalOcean — the server and the database run on their infrastructure.
• Vercel — serves the website itself, and therefore sees the requests your browser makes for pages.

We may also disclose data if the law requires it, or where it is necessary to investigate abuse or protect the service and its players. If that list changes, this page changes with it.

Your account and its game history are kept while your account exists. Ranks, positions and trades from past seasons stay, because a season's record is what the leaderboard was.

Waiting-list entries are kept until you ask us to delete them. Server logs rotate away on their own within days. Analytics events are kept by PostHog under our account for as long as they are useful to us, and are deleted on request.

You can delete your account yourself, at any time, from your account settings. It takes effect immediately and cannot be undone. If you would rather we did it, email mosystemsllc@gmail.com from the address on your account.

Deleting your account erases everything that identifies you:

• Your email address, username, display name and avatar.
• The categories you follow.
• Your Clerk sign-in, and with it your ability to log back in.

Your trades, positions and standings stay on the board, under an anonymous handle that names nobody. This is deliberate: a game's history belongs to everyone who played it, and one player leaving cannot erase the season the others played. None of what remains is linked to you, to your email, or to your Google account.

Deleting your Papermarkets account does not touch your Google account. If you are on the waiting list as well, say so and we will remove that entry too.

You can ask us for a copy of what we hold about you, or ask us to correct it. You can change your username, avatar and followed categories yourself in the product at any time, and delete your account yourself from your account settings.

Depending on where you live — the EU, the UK, California and other places have their own rules — you may also have the right to object to or restrict how we use your data, to receive it in a portable form, and to complain to your local data protection authority. We honour these requests wherever you are, rather than checking first whether we have to.

Where we need a legal basis: we process your account and gameplay data to perform the service you asked for; we rely on our legitimate interest in running a working, non-abusive service for server logs and for the waiting list; and we rely on your consent, where your local law requires it, for the analytics described above.

Papermarkets is not for children under 13, and we do not knowingly collect anything from them. If you believe a child under 13 has an account, write to us and we will delete it.

When what we collect changes, this page changes, and the “last updated” date at the top moves. For a change that materially affects you — a new subprocessor, a new category of data — we will say so in the product rather than quietly editing the page.

Questions, requests, or something on this page that does not match what you see in the product: mosystemsllc@gmail.com. The Terms of Service cover the rest of your relationship with Papermarkets.