Bull Market Clicker — Privacy Policy

Last updated: October 7, 2026

Want to delete your Bull Market Clicker account? You can do so in Game settings or request deletion without the app. Our contact address is jcorpandieth@gmail.com.

1. Scope and Data Controller

This policy explains how Jcorpandieth SASU handles personal data for Bull Market Clicker (the "Game"), its web version, Android application and internal tests. Jcorpandieth is the controller: 60 rue François 1er, 75008 Paris, France, RCS Paris 100 785 518. Contact: jcorpandieth@gmail.com.

The Android application is publicly available on Google Play. The production server is hosted by OVHcloud in Beauharnois, Québec, Canada. OVHcloud also manages server backups directly. Development and test environments remain separate; test accounts and progress do not transfer to the public economy. Reading this policy or accepting the Terms does not give consent to optional processing.

The publisher website and this page are hosted separately on Cloudflare Pages and covered by the website privacy policy. Independently operated installations have their own operator, whom you should contact for information about their hosting and processing.

2. Data We Process

Account and sign-in

  • A stable Google account identifier links your game save to your sign-in. The server verifies the Google sign-in token; we do not receive your Google password.
  • Your email address is processed during sign-in or account verification to show which Google account is connected. It is not stored as a field in the game save or shown to other players.
  • Your chosen display name, a generated trader name, or, where available on Android, your Google Play Games nickname; an avatar you choose to upload; and profile preferences.
  • Session credentials and their expiry, used to keep you signed in. Google and Android also manage their own account information under their policies.

Gameplay and support

  • Virtual coin, diamond and OctetCap balances; clicks, mining, levels, bonuses, upgrades and tutorial progress.
  • Holdings, short positions, orders, reservations, transactions, action history and portfolio history.
  • Watchlists, company votes, rankings, referral codes and relationships, referral rewards, language, sound and transaction-visibility preferences.
  • Creation and activity times, used for income calculations, game rules and duplicate-action prevention.
  • In-game contact messages, their subject, sender, processing status and private support replies. Emails sent to support also include your address and anything you voluntarily attach.

Technical data and optional services

  • IP addresses, request times, browser or app information and technical request headers are received by the server and network providers to deliver and secure the service.
  • If you enable supported push notifications: a device identifier, subscription endpoint, encryption keys, preferences and subscription timestamps.
  • If you use Google Play purchases in the Android app, where available: the purchase token is sent to our server for verification with Google. A record stores a hash of that token, a pseudonymous account reference, the product, diamond quantity, purchase type (real or test), dates and consumption or revocation status. The raw purchase token is not stored in the purchase database.

The current Game does not integrate advertising SDKs, advertising identifiers or audience-tracking tools. We do not collect payment card details, your contacts or precise device location. Choose a nickname rather than your real name and avoid putting personal or sensitive information in an avatar or support message unnecessarily.

3. Purposes and Legal Bases

  • Providing the requested Game (contract performance): authenticate you, save progress, execute orders, calculate income, operate referrals, display rankings, verify purchases where available and answer game-related requests.
  • Security and fair play (legitimate interests): prevent unauthorized access, duplicate credits, fraud and abuse, diagnose incidents, and handle reports or moderation requests, subject to your rights.
  • Optional notifications (consent): deliver the alerts you enable. You may withdraw consent in Game or device settings without affecting earlier processing.
  • Legal obligations: respond to rights requests and valid legal requirements. Records needed for the establishment, exercise or defence of legal claims may also be retained on a legitimate-interest basis.

Account identification and game state are necessary to provide an online save; without them we cannot provide that account. Avatars, referrals, notifications and support messages are optional. Automated calculations affect fictional game outcomes; we do not use them to make decisions with legal or similarly significant real-world effects.

4. What Other Players Can See

  • Leaderboards: player references, display names, avatars, click counts and virtual portfolio values.
  • Trades: prices, quantities and display names of participants, unless their transaction-visibility setting hides the name. The order book shows aggregated prices and quantities.
  • Referrals: when you join through a referral code, your sponsor can see your display name, level and reward-qualification or milestone status.

Hiding your name in transactions does not hide your leaderboard entry or information shared through referrals. It does not remove information from copies another person may already have made. Your full portfolio, sign-in email, support correspondence and notification subscription are not published.

Jcorpandieth also operates automated trading accounts. The bot service uses market information and its own accounts' balances and orders; it does not need access to human players' private portfolios or Google credentials.

5. Hosting, Recipients and Providers

Authorized Jcorpandieth administrators may access data needed to operate, secure and support the Game. Data is also handled by the following providers for the relevant feature:

  • OVHcloud: hosts the production VPS and game database in Beauharnois, Québec, Canada, and directly manages server backups. The game server and database are administered by Jcorpandieth. OVH SAS has its registered office at 2 rue Kellermann, 59100 Roubaix, France. See the legal notice and OVHcloud data-processing terms and subprocessors.
  • Google: Google sign-in, Google Play Games where available, distribution of the Android app, purchase verification and refund or revocation checks where purchases are available. The purchase flow sends Google a pseudonymous account reference to associate a receipt with the correct game account. Google also handles emails sent to our Gmail support address. See Google's Privacy Policy.
  • Push providers, if enabled: your browser or operating system may use Google, Apple or Mozilla to route notifications. Web push payloads are encrypted, while providers handle connection and delivery information. See the policies of Google, Apple and Mozilla.
  • Authorities or professional advisers: only where required by law or necessary to establish, exercise or defend rights.

We do not sell personal information or share it for cross-context behavioural advertising.

6. Cookies, Device Storage and Choices

  • Web sessions: the secure session cookie lasts up to 30 days; the temporary sign-in challenge lasts up to 5 minutes. Signing out ends the current session; deleting your account revokes its sessions.
  • Android sign-in: Google sign-in uses Android's account interface, and the game's web session is kept in the app's WebView. Signing out ends that session and clears the app's connected-account information.
  • Preferences: language, a notification device identifier and the acknowledgement of the privacy notice can remain in local storage until you clear them. The sidebar preference cookie lasts seven days. Other game preferences are stored with your account.
  • Google sign-in: the web sign-in component loads when you request it. Google may use its own necessary account mechanisms to complete sign-in.
  • Notifications: controls are per device. You can disable alerts, unsubscribe or revoke browser permission. Alerts may appear on your lock screen. The push service worker does not cache authenticated game responses.

The Game currently uses no advertising or analytics cookies. Necessary authentication and requested-preference storage operates the service. Any future optional tracking requiring consent will remain inactive until that consent is obtained.

7. Retention and What Deletion Removes

  • Account and progression: retained to maintain your save until account deletion or closure of the relevant environment. There is currently no automatic inactive-account deletion.
  • Game histories: transaction and action histories can be retained beyond the recent entries shown on screen. Older chart observations are progressively aggregated; aggregation alone is not deletion of account-linked data.
  • Sessions and login challenges: expire after the periods in Section 6; expired server records are cleared during subsequent authentication cleanup.
  • Push subscriptions: kept until unsubscribed, deleted with the account or detected as expired. Pending notifications expire after 24 hours; cleanup requires the server to be running.
  • Support: in-game messages and private replies are removed with the account. Email correspondence is kept while handling and following up the request, then only where a legal obligation or a related claim justifies it.

Account deletion removes the active profile, avatar, balances, progression, holdings, positions, orders, votes, personal histories and notification data. It revokes game sessions. Market prices and transaction records can remain, with your player link removed; this preserves the other participants' game history.

Some limited records can remain outside the active profile: a deleted-identifier marker prevents stale requests from recreating the account; technical referral references and administrative audit records may remain; and the pseudonymous purchase-verification record prevents a purchase being credited twice and supports refund or revocation checks. The current implementation does not automatically expire these residual records. They are not a restored game profile. You can request their review or erasure using Section 9; any justified retention must be limited to the relevant security, fraud-prevention or legal need.

Server backups are managed directly by OVHcloud; technical logs are managed separately. Deleting the active account does not immediately overwrite every backup or log. Backup retention follows the recovery cycle and retention settings of the OVHcloud backup service used. Log retention depends on the investigation and resolution of incidents or an applicable legal obligation or claim. Contact us for details about the retention applicable to your data.

8. Delete Your Account

In the Game, open Settings → Delete my game account and confirm. You can also request deletion by email without reinstalling or signing into the Game. The account deletion page explains the steps and verification process.

Deletion permanently removes active progress and cannot be undone through the Game. It does not delete your Google or Google Play Games account, nor records independently held by Google. Uninstalling the app, clearing browser data or signing out does not delete your game account.

9. Your Rights and Contact

Under the GDPR where applicable, you may request access, rectification, erasure, restriction or portability, subject to the applicable conditions. You may object to processing based on legitimate interests for reasons relating to your situation, and withdraw consent without affecting earlier processing. Contact jcorpandieth@gmail.com or write to the controller's address in Section 1.

Identify the game account and request concerned. We may ask for proportionate information to verify ownership, never your Google password. We respond within one month; complex or numerous requests may require up to two additional months, with reasons and notice in the first month. You may complain to your data protection authority, including the CNIL in France.

Where California privacy law applies, you may also have rights to know, access, correct or delete personal information, opt out of its sale or sharing, and exercise your rights without discrimination. We do not sell or share information for targeted advertising. Residents of other jurisdictions may exercise the rights available under their local law using the same contact address.

10. Data Locations and International Transfers

The production database is hosted in Canada, outside the European Economic Area, with administration by Jcorpandieth in France. Google's services and push delivery can also involve other countries, including the United States. The corporate address of a provider does not mean all processing takes place there.

The European Commission's adequacy decision for Canada covers eligible commercial organisations; it is not a blanket exemption for every transfer to Canada. OVHcloud's data-processing agreement describes processing locations, subprocessors and standard contractual clauses for relevant transfers not covered by an adequacy decision.

OVHcloud manages server backups under the subscribed backup service. Backup locations and remote support access depend on that service and the applicable contractual terms. Google explains its safeguards in its data-transfer framework. You may contact us to obtain information about the safeguards applicable to your data.

11. Security and Children

Measures include authenticated access, server-side validation and restricted administrative interfaces. No system can guarantee absolute security. The Game is not directed to children under 13 or below a higher minimum age required by applicable law. If you believe a child has provided data contrary to these rules, contact us so we can investigate and address it.

12. Changes

We update the date above when this policy changes. Material changes will be communicated before they take effect where required, including changes to production hosting. Any required consent for new optional processing will be requested separately. See also the Terms of Service.