Security and privacy

The credentials you connect and your Databento key are encrypted at rest with AES-256-GCM, sealed to your account so a row copied out of the database will not open. Journal records rely on the database provider's own storage encryption. We never receive the password for any platform you connect.

Your credentials

Your TradeLunar password is at least 10 characters and is stored hashed, never in readable form. If you connect a platform, the credential you create there is stored encrypted at rest, is returned by no route, and is deleted the moment you disconnect. The same is true of your market data key if you add one.

What a connection can do

A connection reads your accounts, your fills and your balance, and nothing else. TradeLunar can't place, modify or cancel an order on any connected account, and no code path to an order endpoint exists. Where a platform's credential isn't scoped read-only by the vendor (Topstep's isn't), the connect screen says so before you paste it.

Because TradeLunar can't touch orders, evaluation and funded prop accounts are safe to connect.

Your data

• Connected credentials and your data key are sealed with AES-256-GCM
• Machine-readable CSV export of trades, skips and notes, any time
• Deletion is permanent, runs from settings, and leaves no copy with us

Still have questions?

Email support@tradelunar.io and include the address on your account, so we can find it quickly.