Your data is private to your account
Every trade, journal entry, strategy and AI conversation is linked to your account and checked on the server on every request. Other members can never see your data.
Sign-in
Sign in with Google (OpenID Connect) or with an email and password. Passwords are stored only as salted one-way hashes. Sign-in attempts are rate-limited.
Sessions and transport
The site runs over HTTPS. Session cookies are HttpOnly and Secure, and every form is protected against cross-site request forgery.
Secrets
API keys are encrypted at rest and never shown in the browser after creation.
Payments
Card and UPI details are entered on the payment provider's secure checkout and never reach our servers.
Report a vulnerability
[to be completed] Add the email address for security reports.