Bull Market Clicker — Privacy Policy

Last updated: September 14, 2026

1. Introduction

Welcome to Bull Market Clicker ("the Game"), a fictional stock market simulation playable in a web browser, including compatible Android and iOS devices. This Privacy Policy explains how Jcorpandieth SASU ("we," "us," or "our") handles personal information in connection with the Game.

Jcorpandieth SASU is located at 60 rue François 1er, 75008 Paris, France (RCS Paris 100 785 518). Contact: jcorpandieth@gmail.com. In a locally hosted installation, game data is held by the operator of that installation and is not automatically sent to Jcorpandieth. Contact that operator for requests concerning data they hold.

This policy describes the current version of the Game. Reading it does not constitute consent to optional notifications or other optional processing.

2. Data We Collect

2.1 Account Data

Player identifier and display name.
The authentication interface may receive an identifier, display name, and email from its authentication provider. The game save stores the player identifier and display name, not the provider password.
The current local development version uses a simulated identity; it is not an individual production account.

2.2 Gameplay Data

Virtual balance, clicks, upgrades, tutorial progress, portfolio, and watchlist.
Orders, reservations, transactions, and game history.
Leaderboard scores, language and sound preferences.
Activity timestamps used to calculate passive income and avoid duplicate actions.

2.3 Device & Technical Data

If notifications are enabled: a device identifier, push subscription endpoint, encryption keys, notification preferences, and subscription timestamps.
Servers and network providers receive technical connection information, such as IP addresses and request headers. Local server logs are controlled by the installation operator.
Messages and attachments you voluntarily send when contacting support.

2.4 Analytics and Advertising

The current version does not integrate advertising SDKs, advertising identifiers, or analytics tracking. It does not collect payment card details, contacts, or precise location.

3. Third-Party Services & Hosting

Hosting

TBD

Optional push notifications

If you enable notifications, messages are delivered through the push service used by your browser or operating system. This may involve Google, Apple, or Mozilla. Message payloads are encrypted. These providers handle connection and delivery information under their own policies: Google, Apple, and Mozilla.

The current version does not use Firebase Authentication, Firestore, Unity Ads, or app-store payments. Visiting this document is also covered by the website privacy policy.

4. How We Use Your Data

Operate the Game — identify players, save progression, execute orders, calculate virtual income, and display rankings.
Notifications — send order execution and end-of-passive-income-period alerts when you opt in.
Security — prevent duplicate actions, unauthorized access, and abuse.
Support and legal compliance — answer requests and meet applicable obligations.

Leaderboards show display names, click counts, and virtual portfolio values. Order books show aggregated prices and quantities. Public transaction records do not display player identities. Your detailed portfolio, account data, and notification subscription are not published.

5. Legal Bases for Processing (EEA/UK Users)

Contract performance — processing necessary to provide the requested game features.
Legitimate interests — keeping the service secure and preventing abuse, subject to your rights.
Consent — optional push notifications. You may withdraw consent at any time.
Legal obligation — processing necessary to comply with applicable law.

6. Your Choices & Local Storage

Push notifications — optional and controlled per device. You can enable or disable order and passive-income alerts in the Game, unsubscribe, or revoke browser permission. Alerts may be visible on the lock screen, depending on device settings.
Preferences — language and a notification device identifier are stored locally until removed. The sidebar preference cookie lasts seven days. Session storage depends on the authentication mode.
Service worker — handles push notifications until removed. It does not cache authenticated game responses.
Account deletion — available in Game settings. Clearing browser data alone does not delete a server-side game save.

The current version does not use advertising or analytics cookies. Storage needed for authentication and requested preferences is used to operate the service.

7. Your Rights Under GDPR (EEA/UK Residents)

Depending on the applicable conditions, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent without affecting the lawfulness of earlier processing.

Contact the address in Section 12, identifying the account or installation concerned. We may request proportionate information to verify your identity. We respond within one month; for complex or numerous requests, this may be extended by two further months, with notice and reasons within the first month.

You may lodge a complaint with your data protection authority, including the CNIL in France.

8. Your Rights Under CCPA (California Residents)

Where California privacy law applies, you may have rights to know, access, correct, or delete personal information, opt out of its sale or sharing, and exercise these rights without discrimination. Contact us using Section 12. We do not sell personal information or share it for cross-context behavioural advertising.

9. Data Retention

Account and gameplay data — retained until deleted or the installation database is removed. The current version has no automatic inactive-account purge; recent history is limited in size.
Push subscriptions — retained until unsubscribed, deleted with the account, or detected as expired. Signing out unsubscribes the current device.
Pending notifications — expire after 24 hours. If the server is stopped, cleanup occurs when it resumes processing.
Support correspondence — retained as needed to handle and follow up the request, and subsequently only where necessary for legal obligations or claims.

Account deletion removes the active profile, progression, holdings, orders, and notification data. Public transaction records without player identities remain. A technical record of the deleted identifier prevents stale requests from recreating the account; it is removed when a new game is explicitly created, or can be addressed through a deletion request to the operator.

The delete button does not automatically remove operator-managed logs or manual backups. Their retention and deletion are controlled by the installation operator. It also does not delete an external authentication-provider account.

10. Data Security

Access to private game state is checked against the player identity, and push payloads are encrypted. A local development installation uses simulated authentication and must not be treated as a public production service. Installation operators are responsible for access controls, secure hosting, and backups appropriate to their deployment.

No method of electronic storage or transmission is completely secure.

11. Children's Privacy

The Game is not directed at children under 13. Where a higher age of consent or parental authorization is required by local law, that requirement applies. If you believe a child has provided personal data without the required authorization, contact us using Section 12. Players should avoid using their full name in a public display name.

12. Contact Us

For privacy questions or requests concerning your data:

Email: jcorpandieth@gmail.com
Developer: Jcorpandieth SASU — Bull Market Clicker
Address: 60 rue François 1er, 75008 Paris, France

For a locally hosted or third-party installation, contact its operator regarding data stored by that installation.

13. International Data Transfers

Optional push delivery may involve processing outside your country, depending on your browser provider and its privacy policy. Hosting details are TBD. The providers, locations, and any applicable transfer safeguards for a future hosted service will be specified before that service is made available.

14. Changes to This Privacy Policy

We update the date above when this policy changes. Material changes will be communicated before they take effect; renewed consent will be requested where required. Features not active in the current version will be described before their introduction.