Security

A considered approach to account access, activity records and the information you share.

Account protection

Your password is protected and never displayed in plain text. Repeated failed sign-in attempts trigger a temporary lockout. Administrator access requires additional password confirmation after a period of inactivity.

Session handling

Protected session cookies help keep your account access private. Sessions renew when access changes and expire after a period of inactivity.

Deposits

Deposits use NowPayments live when configured. Send only the asset shown. Provider notifications are verified before crediting a balance, and the same confirmed payment cannot credit twice.

Data we don't store

We do not collect KYC documents, and we never store a full card number or CVV — only the last four digits are kept, for your receipt.

Auditability

Every administrative action — balance adjustments, account changes, withdrawal approvals — is written to an append-only audit log.

Found a security issue? Please contact us directly rather than posting it publicly.