Privacy & Security

Updated October 11, 2026

100Xtoday is operated from New York, United States. For legal, privacy or security requests, contact bdnus2010@gmail.com. Read our Terms of Use & Risk Disclosure for the conditions of practice use and lawful limits on liability.

Information saved with your profile

When you select Accept and save your profile, 100x stores your name, email, birthday, device/browser details and city/state in its private customer database. The site owner can view these customer records in the private owner dashboard.

City and state

Guest mode and password registration ask for city. State / province is optional. Saved-profile forms may offer optional city/state fields. You enter these details yourself. If network-based location is available, it is approximate and can be inaccurate. The application does not request GPS access or store your raw IP address in customer records. Hosting providers may process network information to operate the website.

Google accounts and saved practice

Google sign-in provides your basic name and verified email to identify your account. Your profile, virtual balance, holdings, trades, learning progress and optional profile photo are saved with your account using Cloudflare storage. Your optional uploaded photo is visible beside your profile in the private site-owner dashboard. Successful Google sign-ins are counted, and the most recent sign-in time is stored. Duplicate profile submissions with the same email are grouped together for the owner. Clearing cookies signs you out; signing in with the same Google account restores cloud-saved data. Changes marked pending have not finished saving.

Username and password accounts

You can create an account with a username, password, email, birthday and city. Your profile and optional photo are visible in the private owner dashboard, along with successful sign-in counts and the most recent sign-in time. Passwords are stored as salted cryptographic hashes, never as readable passwords. Password-reset messages are sent through Resend when email delivery is configured. Reset links expire after 30 minutes and can be used once. Email addresses entered for password accounts are self-reported. Security request counters use hashed identifiers and do not store raw IP addresses.

Browser-only practice

Guest mode asks only for birthday and city. These details and guest portfolios stay in browser storage and are not submitted to the customer database. Clearing site data removes browser-only profiles, portfolios and photos.

How information is used and shared

Profile and account information supports sign-in, portfolio synchronization, account recovery, the private owner dashboard and security controls. Cloudflare provides hosting, database and private photo storage. Google handles Google sign-in. Resend handles reset-email delivery when configured. Providers process information needed to supply their features. We may disclose information when legally required or reasonably necessary to address abuse or protect lawful rights. This notice does not authorize unrelated uses of your information.

Security and your responsibilities

The site uses HTTPS, password hashing and access checks for private account data. Session cookies support sign-in, and browser storage supports guest practice, preferences and pending changes. No website, device or provider can be guaranteed completely secure. Use a unique password, protect your device and sign out on shared devices. Do not send passwords, reset links, identity documents or payment details in a security report.

Retention, requests and incidents

Clearing browser data removes browser-local guest information but does not delete a saved server account. To request access, correction or deletion of server-held personal information, email bdnus2010@gmail.com. We may need to verify account control before acting. Requests are handled subject to applicable law; lawful retention needs and provider backup or retention periods may affect what can be removed immediately. We do not promise automatic deletion or a fixed retention period that the system does not implement. Applicable legal duties, including required security-incident notices, remain in effect.

Your legal rights

This notice does not waive privacy, data-security or consumer rights that apply to you. If our practices materially change, we will update this notice and provide any additional notice or consent required by law. New wording does not retroactively authorize incompatible uses of previously collected information.

Market services

100x loads Google sign-in, Coinbase market prices, TradingView charts and currency rates from external services. These services receive the requests needed to load their features and apply their own privacy policies.

100x is an educational simulator. All practice funds and trades are virtual.