Privacy Policy

1. Who is responsible

HaxFunded is responsible for the personal data described in this policy. You can contact us about privacy at any time: [email protected].

2. Data we collect

Account data: your name, email address and a salted hash of your password (we never store the password itself).

Security data: the IP address, browser and device of your sessions, sign-in history and two-factor authentication settings.

Trading data: orders, positions, trades and account results on our simulated accounts.

Payment data: the challenges you buy, amounts, promo codes and payment status. For crypto payments, the transaction ID and the network. We do not collect card numbers.

Identity verification data: the documents you upload for KYC (identity document, selfie and, if requested, proof of address) and the result of the review.

Reward data: the wallet address and network you choose for rewards and the history of your reward requests.

Support data: messages you send to our support.

3. Why we use it

To provide the service: create and protect your account, run challenges, check the rules and pay rewards.

To meet legal obligations and prevent fraud: verify identity, detect multiple accounts and prohibited practices, and keep payment records.

To communicate with you: emails about your account, security, payments and rewards. We send marketing emails only if you agree, and you can unsubscribe at any time.

4. Who we share it with

We share data only with service providers that help us run the service, and only as much as they need: our hosting provider (servers and storage), our email delivery provider and market data providers (who receive no personal data). Crypto payments and rewards are recorded on a public blockchain by their nature.

We do not sell your personal data. We may disclose data if the law requires it.

5. How long we keep it

We keep account, trading and payment data while your account exists and afterwards for as long as needed for accounting, legal obligations and fraud prevention. Identity verification files are stored encrypted and deleted after the retention period.

6. Security

Passwords are stored as salted hashes, identity documents are stored encrypted, connections use HTTPS, and you can review and end your sessions and turn on two-factor authentication in your dashboard. We never ask for your wallet's private key or seed phrase.

7. Cookies and local storage

We use only cookies that are necessary for the site to work: to keep you signed in, protect forms against cross-site requests and remember your language. Your browser's local storage keeps your theme, terminal settings and a promo code you chose. We do not use advertising or tracking cookies.

8. Your rights

You can ask us for a copy of your data, to correct it, to delete it or to restrict how we use it, and you can object to its use. If you are in the European Economic Area or the United Kingdom, you have these rights under the GDPR and may also complain to your data protection authority. Write to [email protected]; we answer within 30 days.

9. Changes

If we change this policy, we will update the date at the top of the page and, for important changes, tell you by email.