Privacy

What W.J.M Exchange stores about you, why, how long for, and what you can make it do about that. Last reviewed 22 August 2026.

What is collected, and why

Because you have an account

• From Google, when you sign in: your Google account identifier and email address. The identifier is what actually logs you in; the email is how a moderator can recognise you. W.J.M Exchange never sees your Google password.
• Your handle, chosen by you, and a W.J.M Exchange account number.
• Your Capital Rift username and game UUID, once you link them, and when that link was proven by a deposit. This is a banking address: withdrawals are paid to it.
• Your date of birth, once, when you first reach a part of the venue that is 18+, or when you first sign in. W.J.M Exchange is not open to under-13s. Only accounts the age gate stops or limits are ever shown to a moderator — an adult’s date of birth is not displayed to anyone.
• Your Discord user ID, only if you choose to have notifications sent to you there. Clearing it stops that.

Because the venue has to work

• Every change to your balance, permanently, on an append-only ledger — deposits, trades, distributions, loans, casino bets, corrections. This is the record that lets W.J.M Exchange prove it can explain the money it holds. See Reserves.
• Your orders, holdings, trades, stops and price alerts, and any company you list. Trades and company activity are public by design: a market with secret prices is not a market.
• Fundamentals your companion extension pushes — your in-game net worth, cash, 24-hour income, inventory and loyalty. You send these; nothing is read from your game account by W.J.M Exchange itself.
• Notifications sent to you, and whether you read them.

Because of security

• Your sessions: when you signed in, from what browser, and the IP address the request came from. Only a hash of the session cookie is stored, so a copy of the database cannot be replayed as a login.
• The IP address of extension pushes, of withdrawal requests, of refused data pushes, and of an account-recovery claim. This is so “where did this come from” is answerable after something goes wrong. Nothing is ever authorised on the basis of an IP address.
• Moderator and owner actions, recorded against whoever took them.
• What your browser refused to load here, if the site’s security policy blocked it — the rule that fired, the address that was blocked, the path of the page, and your browser’s version string. This is how a policy that breaks a page in a browser nobody tested gets noticed at all, because otherwise it just looks broken. Deliberately narrow: no IP address is recorded, query strings are stripped from the addresses before they are stored, and repeats of the same fault increment a counter instead of adding a row — so this cannot become a record of what you did here.

The legal bases

• Performing our agreement with you — running your account, your balance, your trades and your withdrawals. Without this data there is no venue.
• Legitimate interests — the security records above, keeping the venue solvent, and stopping fraud and abuse. The interest is a venue that can be trusted with other people’s balances; the data is the minimum that serves it.
• Your consent — Discord direct messages, and nothing else. Withdraw it by clearing your Discord ID on your account page.
• A legal obligation — the age declaration, which exists because a service like this should not be processing a child’s data at all.

Who else sees it

• Google, because sign-in goes through them. They tell W.J.M Exchange who you are; W.J.M Exchange tells them nothing about what you do here.
• Discord, if you opt into direct messages, and for the venue’s public announcements — company updates, new listings, distributions. Those name a company and its founder’s handle, never a balance.
• The hosting provider, which runs the server and its backups. The server is outside the EEA, so your data is transferred there under the provider’s standard contractual terms.
• Nobody else. Nothing is sold, and there is no advertising, analytics or tracking on this site — no third-party scripts of any kind.

How long it is kept

Your rights, and one honest complication

You can ask for a copy of your data, ask for it corrected, ask for it deleted, object to the security processing, or take your data elsewhere. Most of that you can do right now without asking anyone:

• Download everything — every table W.J.M Exchange keeps about you, as JSON: your account, ledger, orders, trades, holdings, funding requests, grants, loans, bets, notifications, sessions and the fundamentals your extension pushed, addresses and all. Your extension token is the one thing left out, because it is a live credential rather than a record.
• Download CSV on the Banking page, if you want just the ledger in a spreadsheet.
• Your account page lets you change your handle, end sessions and turn off Discord messages.

Erasure is where it gets complicated, and pretending otherwise would be dishonest. The ledger is append-only on purpose: it is how the venue proves that the money it holds adds up, and every entry references the ones around it. Deleting your entries would break that chain for everybody, not only for you. So a deletion request is handled by removing what identifies you — your email, your Google identifier, your game username and UUID, your date of birth, your Discord id, your sessions, your inbox and every IP address on record — and leaving the financial entries behind under an anonymous handle. That is not a description of an intention: it is one action on the operator’s screen, it is irreversible, and afterwards nobody can sign in to the account again, including you. Ask before you have withdrawn your balance and you will be told to withdraw it first, because an erased account is one nobody can ever claim. If none of that is acceptable to you, say so and we will talk about it rather than pretending the tension is not there.

If you think W.J.M Exchange has handled your data badly, tell the operator first — joajoh06@gmail.com — but you have the right to complain to Datatilsynet, the Norwegian Data Protection Authority, and you do not need permission to do it.

Cookies

One cookie, riftex_session, which is what keeps you signed in. It is strictly necessary for a service you asked for, so Norwegian law does not require it to be consented to — which is why there is no banner here asking you to. It holds a random token and nothing else; only a hash of it is stored on the server, so a copy of the database cannot be replayed as a login. There are no analytics cookies, no advertising cookies, and no third-party scripts of any kind on this site to set any.

Children

W.J.M Exchange is not for under-13s. An account that declares an age below that is stopped and its sessions ended. The casino and borrowing are 18+; everything else is open to anyone 13 or over. The declaration is asked once and is not verified against any document — it is a statement you make, and it is what the venue acts on.

Changes

If this notice changes in a way that matters, it will be announced in the venue’s Discord rather than quietly edited. The date at the top is when it was last reviewed.