Privacy policy
Indie IPO is created and operated by Lupchoo from New Zealand. We follow the Privacy Act 2020, with the GDPR basics — access, export and deletion — extended to players anywhere.
What we hold
- Your email address. There is nothing else to sign in with.
- Your firm name, optional website, time zone and display preferences.
- Your game activity: orders, trades, positions, ledger entries and achievements.
- The IP address you signed up from and a random device cookie, used only to spot duplicate accounts created to farm starting cash.
- If you buy something: what you bought, when, and the payment status. Card details go to Stripe and never reach us.
What is public
Your firm name, league, net worth, holdings, achievements and — after a 60-minute delay — your trades appear on your public firm page. Your email address is never public.
Who we share with
Only the services that run the game: Stripe takes payments; Postmark sends our email; Hetzner hosts the servers; Cloudflare R2 stores backups of the database; Sentry and New Relic receive error reports and performance data, which can include the page you were on. We do not sell personal data or share it for advertising, and there are no advertising or tracking cookies.
Broadcast email (the daily brief, weekly summary, season results and product news) is opt-in, carries one-click unsubscribe, and can be turned off in Settings → Email. Login codes and executed margin calls always send because they concern account access and your positions.
Your rights
Email [email protected] for a copy of your data or its deletion and we will action it. Deleting the account removes your identity; anonymised trade records may be retained so the market's history still reconciles. Payment records are kept as long as tax law requires.
Last updated 25 September 2026. Questions: [email protected].