Last updated 16 October 2026

Privacy

Moonzy collects only what it needs to run your paper trading account. There are no ads, no tracking cookies and no sale of data.

What we collect

• Sign-in: the account identifier and email address your sign-in provider shares with us.
• Your account: display name, and if you set them, your handle, bio and profile visibility.
• Your blob: the cartoon avatar picked for you, stored as a random code and its drawing settings. It is drawn on our servers and in your browser; it is never made from your email or account identifier, and no outside avatar service is contacted.
• Welcome questions: whether you finished or skipped the welcome steps, and if you answer it, where you heard about Moonzy. Only you can see that answer; we look at the totals to learn which channels work.
• Your activity: paper trades, positions, watchlist, journal notes and an hourly record of your account value.
• Social: which trade notes you share to the feed, who you follow and mute, and any reports you send (about traders, posts or tokens), with the reason and the reported text.
• Security: your IP address and request details, used briefly to keep the service safe and to limit abuse.
• Errors: when something breaks, a report of the error and the page it happened on. Reports never include cookies, sign-in tokens or your notes.

Cookies

Moonzy uses only the cookies that keep you signed in. They are strictly necessary, so there is no cookie banner.

Who can see what

• Your journal notes, balance and trade sizes are private to you, unless you share a note.
• If you share a trade note, signed-in traders can see it with your handle, the token, buy or sell, the fill price and time, and how the price has moved since. Never the size. Unshare it, or delete the note, at any time.
• Profiles show how many followers and follows a trader has, never who they are. Your mutes and reports are private; reported traders are never told who reported them.
• Token pages show how many Moonzy traders hold a token once at least 3 do, and name only holders with a public profile, never their sizes.
• Your display name, your blob and your returns appear on the leaderboard.
• If you join a private league, its other members see your display name, your blob and your return this week. Only members see a league, and you can leave at any time.
• Where you heard about Moonzy is never shown to other traders.
• While a token page is open, Moonzy notes that the token is being viewed, so its price stays fresh. That note records the token and the time, never who. To stop abuse, each account's requests are counted for one minute, without the token.
• When you open a token Moonzy does not list yet, Moonzy records that your account added it, only to limit each account to 20 new tokens an hour. That record is deleted within a day. The token itself then appears on Moonzy for everyone, without your name.
• When you search for a token Moonzy does not list, our server sends your search words, never your account, to DEX Screener. Each account's searches are counted for one minute, without the words.
• If you make your profile public, signed-in traders can see your handle, bio, blob, returns and each holding's share of your account.

Who processes it

• Supabase: database and sign-in, hosted in Sydney, Australia.
• Vercel: hosting, in the same region.
• Upstash: short-lived request counters for rate limiting.
• Sentry: error reports, when error reporting is switched on.
• Price providers are called only by our servers and receive no personal data. DEX Screener receives the words of a token search, never who searched.
• CoinGecko (major-coin prices): our servers request the prices of major coins from the CoinGecko API, which is CoinGecko's property. We send CoinGecko no personal data, and your browser never contacts it for prices.
• DexScreener (token icons): your browser loads token icons from DexScreener's image servers, and a few coin logos from CoinGecko's. Like any image on the web, those servers see your IP address and browser type. We send them no account details and no address of the page you are on. Major coins' icons come from Moonzy itself.

How long we keep it

Account data, including your blob, your welcome answers, your follows, mutes and shared notes, is kept while your account exists. Reports are kept for moderation records until your account is deleted. Hourly account values are kept for 400 days. Error reports follow Sentry's retention.

Your choices

• Change your display name, handle, bio and profile visibility in Account at any time. Making your profile private takes your shared notes off the feed.
• The welcome question is optional; skip it, or ask us to delete your answer.
• Export your trade journal from Account.
• Ask for a copy of your data, a correction, or deletion of your account by contacting us.

Contact

Privacy questions and requests: the support address listed on moonzy.fun.