Margin Call · Privacy

What we keep about you

Margin Call is a trading game on paper money at margincall.world. It has no ads, no third-party trackers and no cookies beyond the one that keeps you logged in. This page says plainly what the game stores, why, and how to have it removed. Last updated 28 October 2026.

A guest desk

When you open the game, your browser makes a random id and keeps it in its own storage (localStorage). That id names your paper desk: its trades, its positions, the name and the look you pick. It is not shared with anyone and it is not linked to you as a person. Clearing the browser's storage leaves the desk behind.

Hyper Street Odds, the bank's game of yes or no questions, closed on 27 October 2026. The bets a desk made before then stay stored with that desk, but the game no longer shows them, and no new bets are kept.

In Telegram, the game keeps the Telegram user id the app sends and the language your app reports. With them the bot can tell you how a trade ended and send one evening message about your desk's day or the market's, once you press Start in its chat or let it write to you. Until your first trade, a few of those evening messages are reminders on how to start; the bot keeps when it sent them, and the game notes the days a button in the bot's messages opened your desk. /stop in the bot's chat turns those messages off.

Up to twice, at least five days apart, one of those evening messages also invites you to the bank's Telegram channel. Before each invitation, the bot asks Telegram whether you are in the channel already, and if you are, it does not invite you. The bot keeps only the times it invited you, and whether it found you in the channel.

A saved desk

If you save your desk, we store the email address you give, a salted hash of your password (never the password), and the desk itself, so it opens on any device. One cookie keeps you logged in; it carries a random session token and nothing else. The email is used only to log you in, to send a password reset when you ask for one (mail sent through Resend), and never for marketing. Your desk's name, look, returns, grades and trades appear on the public leaderboard and on your public profile page, as in any game; the email never does.

When you save a desk, we send a link to the email address to confirm it; an address not confirmed within 7 days is removed, and the desk becomes a guest desk again on the device it was saved from.

Visitor numbers

We count visits ourselves: a page view counts a visitor once a day under a hash made from the day's random salt, the visitor's address and browser. The salt is replaced every day and the old one deleted, so nobody can be followed from one day to the next, and no address is stored. We also note where a visit came from (the referring site or a campaign tag in the link) and what a visitor did on the landing page (scrolled, stayed, clicked). No cookies are involved.

What leaves our server

• Prices come from Hyperliquid's public market data; your browser talks only to margincall.world, never to Hyperliquid.
• The Journal's commentary is written with an AI model (Anthropic); it receives headlines and market numbers, never anything about you.
• The bank's own accounts on X, Telegram and Instagram publish the Journal; nothing about players goes there except what is already public on the leaderboard.
• The server runs on Railway in the United States; the database stays on its volume with daily copies.

The trading API

A saved desk may make an API key so its own code can trade the desk. We store the key's hash, never the key. Your code runs on your machine; the bank never sees or runs it.

Children

Margin Call is not directed at children under 13 and we knowingly keep nothing about them. It is a game about risk, played with paper money; nothing on the site is financial advice.

Your data, removed

To delete a saved desk and everything with it, write to hello@margincall.world from the email the desk was saved with; it is removed within seven days and you get a confirmation. A guest desk is removed the same way if you tell us its id (shown on your profile page), or simply by clearing your browser's storage. Data deletion requests from Instagram or other connected platforms are handled the same way through that address.

Changes

If this page changes, the date at the top changes with it. Questions: hello@margincall.world.