E
← Back to Home

Privacy Policy

Last updated: June 23, 2026

1. Introduction

EndMock ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, nickname, date of birth, and country code when you register.
  • Profile Information: Any additional information you choose to add to your profile.
  • Communications: Messages you send through our Contact Us form.
  • User Content: Blog posts, comments, forum and channel posts, direct messages, and trading activity.
  • Verification Data: Email verification codes and verification status during registration.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, time spent on pages, features used, and trading patterns.
  • Device Information: Browser type, operating system, device identifiers.
  • Log Data: IP address, access times, referring URLs.
  • Cookies: Session cookies for authentication and preference storage.

3. How We Use Your Information

  • Provide, operate, and maintain the platform.
  • Process trades and manage your account.
  • Generate personalized recommendations and leaderboard rankings.
  • Send platform updates and notifications.
  • Respond to your inquiries and support requests.
  • Detect and prevent fraud, abuse, and technical issues.
  • Improve the platform through analytics and research.
  • Comply with legal and regulatory obligations.

4. Data Sharing

We do not sell your personal information. We may share information in the following circumstances:

  • Public Profile: Your nickname, trading statistics, and leaderboard position are visible to other users.
  • Service Providers: Third-party services that help us operate the platform (hosting, analytics).
  • Legal Requirements: When required by law, court order, or governmental regulation.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • Aggregated Data: Aggregated or anonymized data that cannot identify you may be used for analytics and shared with partners.

5. Cookies and Tracking

We use cookies for authentication (the endmock_session cookie stores your JWT token for maintaining login state, 7-day expiry), preferences (language and locale settings stored in localStorage), and analytics. You can control cookies through your browser settings. Disabling cookies may limit platform functionality.

6. Data Retention

We retain your account information and trading data for as long as your account is active. You may request deletion of your account and associated data by contacting our support team. After account deletion, we may retain certain records for a reasonable period where required by law, to resolve disputes, or to enforce our agreements.

7. Data Security

We implement industry-standard security measures including:

  • Password hashing using bcrypt (cost factor 12).
  • JWT tokens with HS256 encryption for session management.
  • HTTP-only cookies to prevent XSS attacks.
  • Input validation and sanitization on all endpoints.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal data.
  • Object to or restrict certain processing activities.
  • Data portability — export your data in a standard format.
  • Lodge a complaint with your local data protection authority (EU/UK residents under GDPR).
  • Regional laws: Users in Japan may exercise rights under the Act on the Protection of Personal Information (APPI); users in Korea under the Personal Information Protection Act (PIPA); users in China under the Personal Information Protection Law (PIPL), including access, correction, deletion, consent withdrawal, and account cancellation.
  • Users in the United States may exercise rights granted by applicable federal and state privacy laws, including the California Consumer Privacy Act as amended (CCPA/CPRA), such as the rights to know, access, correct, and delete personal information, and to opt out of its sale or sharing.
  • Users in the Hong Kong Special Administrative Region of China may exercise rights under the Personal Data (Privacy) Ordinance (PDPO, Cap. 486), including requesting access to and correction of their personal data.

9. Children's Privacy

EndMock is not intended for users under 16 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we will delete it promptly.

10. International Data Transfers

Information we collect may be processed and stored in the country where our servers are located, which may differ from your country of residence. When personal data is transferred across borders, we implement appropriate safeguards consistent with applicable law, including contractual safeguards and security assessments. By using the platform, you consent to such transfers to the extent required and permitted by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us through our contact page or email privacy@endmock.com.