PRIVACYGHOST LAB · PAPER DESK

Effective October 13, 2026. This notice covers the Ghost Lab paper desk at doctorbryce.com and the Ghost Lab iPhone app. The app is a window onto that same site.

PAPER ONLY

This is a paper-trading simulation. Balances, stakes, leverage, and P&L are play money. No real funds move. No prizes are paid. Nothing is owed. This is not financial advice, not a brokerage, and not a forecast of what a real trade would do.

WHO CAN COME IN

Anyone can create an account. You can also continue as a guest. A guest is view-only: the main desk is visible, and trading, the private desk, settings, and API keys are not. A guest session is a signed cookie. It is not saved as a user row, and guests do not appear on the leaderboard or the high scores.

WHAT WE STORE

For an account we store the username, a hashed password (with its salt; not the password itself), paper balances and the paper stats around them, paper trades, chat messages, and high scores. Paper API keys are stored as a hash plus a short prefix so a key can be recognized after the secret is shown once. One-time invite codes are stored too. If you use the iPhone app, we can also store an Apple push device token and, if you turn on Face ID, a hash of a random phone key.

We do not ask for an email address to create an account. If you email us, or use the form on the support page, that message includes the address you typed. We use it only to reply.

On the live desk that data is in Neon Postgres. The site runs on Render. A session cookie keeps you signed in. It is not a copy of your password. Rate-limit counters stay in memory on the server and are not a customer database.

HOW IT IS USED

We use the account to run the paper desk, show your paper trades and balance, post lab chat under your username, send the push alerts you turn on, answer a support message, and keep the lab safe. We do not use it to build an ad profile.

FACE ID

Face ID is handled on the iPhone by iOS. Biometric data, face images, and face templates are never sent to us. After a successful check, the app sends only the random phone key that was saved in the iOS keychain. The server trades that key for a session. You can revoke it from Settings on the site or in the app. Forgetting the phone drops the key from the keychain.

PUSH ALERTS

Push device tokens are used only to send paper trade alerts: your own positions opened, closed, or liquidated (including trades placed with your paper bot key), and Ghost's bot trades if you turn that switch on. To deliver a banner we hand the token to Apple Push Notification service. We do not use it for marketing.

PUBLIC POSTS

Public posts on X (Twitter) are read only to compute an aggregate bull and bear sentiment count for the paper desk. Those posts are not saved on your account, are not tied to your username, and are not sold or used for ads.

NO SALE, NO ADS, NO TRACKERS

We do not sell personal information. We do not show ads, and we do not run third-party ads. We do not run analytics. We do not install analytics packages, advertising pixels, or third-party tracking SDKs.

Two outside services still see a connection, because the pages ask them for something other than a profile of you:

• Google Fonts. The browser loads the typefaces from Google. Google can see the usual connection data, such as an IP address. We do not send Google your account.
• Binance public market data. The browser and the server request BTCUSDT prices and candles from Binance's public data API, and on some devices a public price stream. That is the chart, not your Ghost Lab account.

LAB CHAT

Signed-in accounts can post in lab chat. Guests can read it and cannot post. Each message is stored with the account that sent it, in the same Neon Postgres database. A message is plain text, capped in length, and checked against a short list of slurs and profanity before it is kept. Links stay text. They are not turned into live links. A signed-in user can report a message and can block another account, which hides that account's messages for the blocker only. A username in lab chat or on the leaderboard opens that player's profile, and block and report are on the profile. The operator can delete a reported message and can mute or ban an account from chat. Messages from a deleted account are hidden. Chat rows are kept for security, abuse prevention and dispute purposes, the same as the other records. Email support@doctorbryce.com about a chat report.

DELETION

Settings, on the site and in the iPhone app, has a Delete account button. You confirm by typing your username. Deleting an account removes it from the app and from public view: the leaderboard, the high scores, and the lab balance callouts. Login stops, API keys and phone keys stop working, push device tokens are revoked so alerts stop, and that username cannot be registered again while the account is deleted. Chat messages stay stored and are hidden. The account, paper trades, balances, and key history are not erased. Those records are retained for security, abuse prevention and dispute purposes. Email support@doctorbryce.com with questions. A guest has no account row; log out and the guest cookie ends.

AGE

The desk is not directed to children under 13. We do not ask for a birthday. If we learn an account belongs to someone under 13, we remove it from the app and from public view the same way.

CONTACT

Privacy questions and deletion requests go to support@doctorbryce.com.