Privacy policy
Updated: 13 September 2026 · Trial version
Who we are and why information is collected
M.L. First Class Marketing, Reg. no. 515844082 · HaOren 2, Regevah 2280400, Israel.
For inquiries:marketing@mlfirstclassmarketing.com. Please do not send passwords or financial account details.
“The Young Investor” is an educational service for practicing with virtual money. The site is hosted on Railway. Providing registration details is your choice; without the required details a personal account cannot be saved.
Information that is stored
Username, email address, date of birth, progress in lessons, answers, points, visits, choices in exercises, virtual holdings and the investment box journal. The password is not stored as typed. A secure hash of it is stored, combined with a random value for additional protection. The information is used to manage the account, to adapt the learning level and to save practice. The connection address is used temporarily to limit requests and prevent misuse.
Sign in with Google
Choosing sign-in with Google loads its authentication service and gives us a stable Google ID and an email address verified by Google. We will store them for sign-in and account linking. We do not receive your Google password nor request access to your Gmail or contacts. Birth date, display name and learning progress are stored with us and are not attached to the authentication request. Google may receive IP address and browser details and use cookies according toits privacy policy. You can choose email-and-password registration instead.
Children and parents
The service also serves children and teens. Accounts for users under 18 require a parent or guardian’s email approval, including existing accounts. Public lessons remain available before approval. This verifies email access and an adult’s declaration of parenthood or guardianship, not identity documents. No real investment account is opened.
We retain the parent’s email, consent version, approval time and account link. SendGrid receives the recipient address and consent messages; open and click tracking are disabled. Uncompleted requests expire after 24 hours and are removed by periodic cleanup. Linked records remain while the account exists. Withdraw via the email link or contact us for data deletion. Withdrawal blocks access but does not automatically delete the account.
The teacher and narration
For accounts identified as under the age of 13, the teacher uses the site's local educational content and does not send the questions to an external AI service.
When the teacher is enabled the question, up to six previous messages in the conversation context, progress level and learning topics are sent to OpenAI. Username, email, birth date and password are not included in the request. If you type personal information into the question, it will be included.
Answers and conversations are stored in the browser memory during use, not in the conversations table on our server. Requests are set store:false; this is not a promise of immediate deletion from the provider’s systems. Processing of the information is also subject toOpenAI’s policy. It is possible to learn without using the teacher.
The website's Read-aloud button sends the displayed text you selected to ElevenLabs to generate speech in the chosen language. We do not attach passwords or birth dates; personal information included in the text itself may be included in the read-aloud. Audio files are available for reuse by the account for seven days.
Old files are cleared when new recordings are generated; until then an expired file is not served again. A daily production limit is used to control usage. No microphone recording. The accessibility plugin may offer additional read-aloud via the device.
Negishot accessibility plugin
The accessibility plugin is loaded from Negishot’s server. The provider may receive IP address, browser details and plugin usage data. Accessibility preferences and a session identifier may be stored in the browser. Use is also subject to the provider’s policy on their siteNegishot.
External services and aggregated data
The server requests market data from Yahoo Finance without transmitting your account details. The font is served from site files, with system fonts as a fallback; no fonts are loaded from Google Fonts. Links to sources open third-party sites with their own policies. Google Analytics operates in a limited-measurement mode without cookies before consent.
Those signals may include request, device and event details, and are not a guarantee of anonymity or absence of personal data processing. Measurement cookies will be enabled only with explicit consent of adults; for accounts identified as minors measurement is off. We do not know the age of visitors who did not identify themselves. You can disable all Google measurement in storage settings.
Traffic and device data may be transmitted to Google. Names, emails, questions and portfolio data are not attached to measurement events. Comparison of choices is shown aggregated without names; a small sample does not guarantee complete anonymity and does not represent the public.
Storage, security and transfer
Account data is stored in a database on Railway’s persistent storage until deletion. Authentication uses a session cookie protected from JavaScript access. The public site uses an HTTPS connection. External services may process information outside Israel. No system guarantees absolute security.
Activity measurement for service management
The site receives a heartbeat from the tab every 30 seconds while it is visible. A random tab identifier is stored in memory only; inactive tabs are dropped after 90 seconds. In a signed-in account activity is linked to the account to show administrators a current screen and learning progress. Types of learning actions and timestamps are retained for up to 30 days.
No keystroke collection, conversation content, screen recordings or mouse movements are collected. Account progress data itself is stored separately. This measurement is separate from Google Analytics and operates even without consent to its cookies.
Optional tests and ranking
Test answers, the score, completion time and challenge result are saved in the account. Joining the leaderboard is optional. Those who join are shown to other participants under a separate random nickname, with score and time, without the account name, age or contact details. Participation can be removed at any time. The teacher does not receive ranking data or information about other users.
Improving educational content
For the purpose of improvement the teacher retains daily counters by general topic and request outcome (answer, request blocked or error), for 90 days. The counters do not include the question text, the answer or a user identifier. There is no automatic model training on site conversations.
Service management
An authorized administrator has access to account details, progress, service notes and data exports. Administrative actions are logged; passwords and teacher calls are not shown in the admin interface.
Access, correction and deletion
You may contact the contact address to request access to data, correction or deletion, in accordance with applicable law. Proportionate identity verification may be required. Requests are handled by the site operator after identity verification.Information about deletion.
The translations are intended to make the information accessible. They were computer-assisted and have not yet undergone legal review in the target language. In case of ambiguity you may contact us for clarification.