Security and your data

Where your data lives

Your data is stored on Infomaniak servers in Switzerland, and the database is backed up daily, also in Switzerland. Infomaniak hosts the app and database and sends our emails as processor under a contract; the provider of Edgetrail is LudusNovus LLC.

How your account is protected

• Transfer is encrypted (HTTPS/TLS).
• Your password is stored only as a salted hash (PBKDF2). Nobody can read it, not even us.
• Sign-in sessions and email links are stored only as a hash; sessions expire after 60 days.
• Sign-in attempts are throttled. You get an email when a new device signs in, and you can sign out individual devices or all of them in settings.
• The app sends strict browser security headers: a Content Security Policy, HTTP Strict Transport Security, no framing by other sites, no MIME sniffing.

No tracking, no reselling

No ads, no analytics cookies, no reselling of your data. No reselling, no ad tracking. Your data always comes with you.

Exchange keys stay on your device

If you import trades from Bybit, Binance, OKX or Hyperliquid, your API keys stay on your device only. For the Bybit import your browser signs the request with your key and sends it directly to Bybit, never via our server.

Export any time

Export any time as JSON or CSV. When you delete, everything arrives by e-mail. Then you have 90 days to export everything – and Founder and Lifetime get a pro-rata refund within 3 years of purchase. It's in the Terms.

No AI black box

Every number is transparently calculated. You see exactly how your result comes about. Every number can be traced line by line.

Reporting a security issue

Write to support@edgetrail.app. Our security.txt lists the contact as well. Everything about data processing, retention and your rights is in the privacy policy.