1. Scope

This Privacy Policy describes how Crazy Reality, a private and invitation-only automated trading application operated by Craig Joe Lehr (the “Operator”), handles information associated with its public website, authenticated client portal, and authorized brokerage connections.

2. Information Crazy Reality may handle

Depending on the features an invited participant uses, Crazy Reality may handle:

• Invitation and contact information, such as a participant’s name, email address, and direct contact details.
• Portal information, such as an internal user identifier, access status, and essential authenticated-session information.
• Brokerage identifiers, such as the brokerage firm, account identifier, account type, authorization status, and connection status.
• Brokerage and trading information, such as account balances, buying power, positions, orders, fills, transaction activity, and reconciliation results.
• Authorization information, including OAuth access tokens or similar broker-issued credentials needed to perform actions the participant authorized.
• Operational information, such as application events, timestamps, error messages, security events, and audit records used to operate and troubleshoot the system.

3. Information Crazy Reality does not request

Crazy Reality does not ask an OAuth-connected participant to provide the participant’s brokerage password. The participant signs in directly with the brokerage firm and authorizes the requested access there. Crazy Reality does not receive custody of participant funds and does not collect deposits for investment.

4. How information is used

Information is used only as reasonably necessary to:

• Authenticate invited participants and administer private access.
• Connect to an authorized brokerage account.
• Calculate, submit, monitor, cancel, and reconcile authorized orders.
• Display account, roller, position, order, and performance information to the appropriate participant.
• Maintain operational records, investigate errors, detect unauthorized activity, and protect the application.
• Comply with brokerage requirements and applicable legal obligations.

5. OAuth and brokerage authorization

When a participant chooses to connect a brokerage account through OAuth, the participant is redirected to the brokerage firm to sign in and review the requested permissions. After approval, the brokerage returns an authorization response to Crazy Reality. Crazy Reality then exchanges that response for broker-issued access credentials and uses them only within the permissions the participant granted.

OAuth credentials are treated as sensitive. They are not intentionally displayed publicly or disclosed to other participants. A participant may revoke authorization through the brokerage firm or request that the Operator discontinue the connection.

6. Sharing of information

Crazy Reality does not sell participant information and does not use it for third-party advertising. Information may be disclosed only as reasonably necessary:

• To the participant’s brokerage firm to operate the authorized connection and orders.
• To infrastructure or technology providers that support hosting, communications, security, or application operation.
• When required by law, legal process, a regulator, or a valid governmental request.
• To protect participants, the Operator, the application, a brokerage firm, or others from suspected fraud, abuse, or security threats.

7. Storage, location, and safeguards

Crazy Reality uses a privately controlled server and restricted administrative access to operate the application. The application’s infrastructure may be located in England or another jurisdiction selected by the Operator, which means information may be processed outside the participant’s state of residence.

Reasonable administrative and technical measures are used to limit unauthorized access and protect sensitive operational information. No internet-connected or electronic system can be guaranteed completely secure, and participants should promptly report suspected unauthorized activity.

8. Retention

Crazy Reality retains information for as long as reasonably necessary to operate an authorized connection, maintain trading and reconciliation records, resolve disputes, investigate security or operational events, and satisfy applicable legal or brokerage requirements. When information is no longer reasonably needed, it may be deleted, de-identified, or archived subject to operational and legal requirements.

9. Cookies and public pages

Crazy Reality’s public overview, Terms, and Privacy pages do not intentionally use advertising cookies. The authenticated client portal may use essential session cookies required for sign-in and account security. A participant who disables essential cookies may be unable to use authenticated features.

10. Participant choices

An invited participant may:

• Decline to connect a brokerage account.
• Revoke a brokerage authorization through the brokerage firm.
• Request that Crazy Reality discontinue access to the participant’s account.
• Ask to review or correct participant information maintained directly by Crazy Reality.
• Ask about deletion of information, subject to records that must reasonably be retained.

11. Children

Crazy Reality is not intended for children and does not knowingly invite or authorize anyone under 18 years of age to use the application.

12. Changes to this policy

This Privacy Policy may be updated when application functionality, brokerage integrations, infrastructure, or legal requirements change. The effective date at the top of this page identifies the current version.

13. Contact

Privacy questions, authorization-revocation requests, and requests concerning participant information should be directed to Craig Joe Lehr using the direct contact method provided with the participant’s invitation.