Privacy Policy

This demo explains how account, portfolio, and session data are stored locally for testing.

Data Usage

Registration, login sessions, investments, and withdrawals are kept in local JSON storage (`data/db.json`) for development only.

Security

Passwords are hashed using PBKDF2 with per-user salts. Replace local storage with a managed database and production-grade auth before deployment.

Transparent Fees

Withdrawal fees are disclosed at request time and deducted automatically; no hidden release fees are enforced.