Your keys are encrypted, and never stored by us
AES-256-GCM at rest in your browser. Account, position and order requests pass
through our broker relay, which forwards your credential on that single request and
does not store or log it — and the sync endpoint refuses anything that looks like
a secret key. How it works →