Privacy notice

Witch Terminal is run by Wizard Trader Academy. Contact: support@witchterminal.com.

The operator is the controller of the personal data described here.

As a guest, nothing about you is sent to us. Your answers, brews, practice scorecard, lesson progress and the study's settings are kept only in your own browser (local storage), and you can clear them at any time by clearing this site's data. Market prices are fetched by our server from public sources; no information about you goes with those requests.

• Your email address and a securely hashed password (we never see the password itself).
• The display name you choose, if any, and the mentor you pick for the study.
• Your brews: your six answers, the call, conviction, the reason you wrote, the time you sealed, the reference price, the Shelf check at sealing, the verdict and the price it was judged on, and your review. Also your unfinished draft.
• Your practice weeks: the answers, the call and whether it was right. They are kept apart from your brews.
• Account facts: when you signed up and last signed in, whether you closed the welcome card, and your tier (Free, or Arcana with its end date, and whether it is a free trial), and the language you chose.
• Your email choices (the reminders and the weekly report, both off until you turn them on), a private token for the unsubscribe link, and a log of which of these emails were sent, so none is sent twice.

We use no analytics, no advertising identifiers and no tracking cookies. Arcana is not on sale yet, so we keep no payment details.

Anyone can send us a note from the study. We keep the note, its kind and the page it was sent from. A member's note is linked to their account and emailed to us with their email address, so we can answer. A guest's note carries nothing about them: to limit how many notes one connection can send a day, we keep only a one-way scrambled code made from the connection's address, never the address itself.

If you ask for the Raven's letter, we keep your email address, the language you chose, where on the site you asked (a shared card's page, your sealed brew or another page), the week of your sealed brew when you asked from it, a private token for the confirm and stop links, the dates you asked, confirmed or stopped, and the week of the last letter sent, so none is sent twice. Nothing is sent until you confirm with the link in the first email. Every letter has a link that stops it with one click, and you can also write to us.

A request never confirmed is deleted after 30 days. Once you stop the letter, we keep only your email address and the date you stopped, so that nothing is sent to it again unless you ask anew; ask us and we delete that too.

To provide the service you signed up for: keeping your brews and practice weeks, judging them, showing your record, and sending the emails you asked for (performance of a contract, GDPR Article 6(1)(b)). To keep accounts secure and the service running, for example sign-in sessions, limits on notes and server logs (legitimate interests, Article 6(1)(f)). To read and answer the notes you send us (legitimate interests). To send the Raven's letter to an address that asked and confirmed it (your consent, Article 6(1)(a), which you can withdraw at any time with the link in every letter).

The Coven adds up everyone's brews for the week. Only totals ever leave the server, never a brew or who sealed it, and only once at least ten brews are in. Brews brought in from a browser are left out of it.

• Sign-in cookies set by our authentication provider, needed to keep you signed in.
• A short-lived cookie (15 minutes) that proves you followed a password-reset email.
• A cookie that remembers the language you chose (English or Bulgarian).
• Local storage for a guest's brews and draft, practice scorecard and lesson progress, the study's settings (zoom, clock, weather, season and a city if you choose one), the grimoire's text size, a note kept for the raven, and whether the welcome card was closed.

All of these are strictly necessary for the terminal to work as you set it, so no consent banner is needed.

• Supabase: the database and sign-in, hosted in Frankfurt, Germany (EU).
• Vercel: hosting. The server functions run in Frankfurt; Vercel Inc. is based in the United States and may process technical logs there, under the EU Standard Contractual Clauses.
• Resend: sends our emails (sign-in, confirmation and password-reset emails, the emails you ask for, the Raven's letter and the raven's notes to us). Resend, Inc. is based in the United States, under the EU Standard Contractual Clauses.
• Cloudflare: receives mail sent to support@witchterminal.com and forwards it to us.
• Open-Meteo: only if you choose a city in the study, your browser sends the city's name (to find it) and its rounded position (for its weather and season) to Open-Meteo, directly and without any account details.

For as long as your account exists. Deleting your account (on your profile) removes your brews, draft, practice weeks, profile, email choices, subscription and the raven notes you sent, all at once (the copy of a note already emailed to us stays in our inbox until we delete it; ask and we will). A guest's notes are kept until we no longer need them to improve the terminal. Our providers' routine backups may hold a copy for a short time afterwards before it is overwritten.

You can see and correct your data on your profile, download your record of every brew as a CSV file (portability), turn the emails off at any time (in your profile, or with the link in every email), and delete your account yourself (erasure). You can also ask us for access, correction, restriction or erasure, or object to processing, using the contact above. If you think we have handled your data wrongly, you can complain to your data protection authority; in Bulgaria that is the Commission for Personal Data Protection (КЗЛД).

Witch Terminal is a training game. Nothing in it is investment advice, and it never places or takes a trade.