Your privacy on ASTREX

ASTREX is the data controller for the personal data described in this policy. If you have any questions about this policy or how your data is handled, contact us at astrexofficial.brand@gmail.com.

• Account data — name, email address, and a securely hashed password (or your Google account identifier if you sign in with Google).
• Profile data — your chosen avatar, interface language and theme preference.
• Learning activity — lesson progress, quiz answers and scores, XP, level, and streak data.
• Virtual trading data — your simulated portfolio balance and the virtual trades you open and close. This is entirely simulated; no real money or real brokerage data is involved.
• Consent records — whether you agreed to this Privacy Policy and our Terms of Service, the date and time (UTC) you did so, the policy/terms versions you agreed to, and the IP address and browser user-agent recorded at that moment, as evidence of consent.
• Cookies — strictly necessary cookies for authentication and your saved preferences (theme, language), and — only if you accept them — optional analytics or marketing cookies. See our cookie section below.

• To create and secure your account, and to let you sign in.
• To operate the core features of ASTREX: lessons, quizzes, XP/streaks, the leaderboard, and the virtual trading simulator.
• To remember your interface preferences (language, theme, avatar).
• To send you a one-time verification code when you register with email and password, and to respond to support requests you send us.
• To keep a record of your consent, as required by the GDPR.
• To improve the product, if you have opted in to analytics cookies.

We keep your account and activity data for as long as your account is active. If you delete your account (Settings → Delete Account), your profile, learning progress, and virtual trading data are permanently deleted. Consent records may be kept for a limited period afterward where we have a legal obligation to demonstrate that consent was obtained. Backups are rotated and fully purged within a reasonable period after deletion.

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you (Settings → Download My Data).
• Rectification — correct inaccurate or incomplete data (Settings → Profile).
• Erasure — request deletion of your account and personal data at any time (Settings → Delete Account).
• Data portability — receive your data in a structured, machine-readable format (JSON export).
• Restriction — request that we limit how we process your data in certain circumstances.
• Objection — object to processing based on our legitimate interests, including analytics.

To exercise any of these rights beyond the self-service tools in Settings, contact us at astrexofficial.brand@gmail.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

We use strictly necessary cookies to keep you signed in and remember your theme and language choice — these cannot be disabled as the site would not function without them. Optional analytics or marketing cookies are only set if you explicitly accept them via the cookie banner. You can change your choice at any time from the cookie settings link in the footer.

We do not sell your personal data. We use a small number of service providers to operate ASTREX — for example, our hosting provider, our database provider, and our transactional email provider (to deliver verification codes) — who process data on our behalf under appropriate data processing agreements.

If we make material changes to this Privacy Policy, we will update the version number and date at the top of this page. Continued use of ASTREX after a change constitutes acceptance of the updated policy.