The terminal works with your money and your keys, so the question “what does it send out” deserves a precise answer rather than reassurance.

What reaches our server

A sign of life. A short message saying the terminal is running: the reason (launch, sign-in, every half hour while the window is open), the build version, the operating system, the architecture, the interface language and a device fingerprint — the first 32 characters of a hash of the machine identifier, from which the machine cannot be recovered.

It is a counter of the live audience: many create an account, not all of them open the terminal.

A crash report. If the terminal crashed, the next launch sends a report: the signal, the version and the call stack. No dialogs and no questions — a person launched the terminal to trade, not to repair our telemetry.

Sync of what you told it to sync: settings, chart drawings, journal notes. Secrets travel as ciphertext.

What those messages never contain

The instrument, the broker, the account number, sizes, trades, balance, drawings, e-mail, token. A smoke test checks this on every build: it looks for the forbidden fields and turns red if it finds them.

The sign of life can be switched off. Without a sign-in it is not sent at all: there is nobody to count.

How keys are kept

Configuration files are created readable by their owner only, and the permissions are set before the write, not after. With encryption on — AES-256-GCM, the key derived from a passphrase through PBKDF2 (200,000 iterations), with a random salt and nonce stored in the file itself; tampering is caught by the cipher mode.

On the server, synced items are stored encrypted: one key per item, wrapped by a master key kept outside any web-reachable folder. The sign-in token travels in a header rather than in the address, so it does not settle in web-server logs.

TLS verification is never switched off. Secrets are never written to logs: no log line prints a token, a key or a password.

What other people see

Nothing — until you open your profile yourself. In public mode the whole trading record is visible; in private mode none of it is.

Money amounts never leave in any mode: only percent, pips and R. Contacts — mail and phone — are never shown; inside the platform people reach each other by nickname.