Security

The model in one sentence

We never take custody of your money, your API keys or your accounts. Everything we run for ourselves runs on our own account; everything we set up for you runs on your own server.

The live bot on the homepage

It trades our own money on our own Hyperliquid account. No customer accounts are connected to it, and every trade is publicly verifiable on-chain ↗.

Bot setup — your server, your keys

On your own server, you run the installer yourself. We do not log in to your machine, and we never ask you for access to it.

• You run one command on your server. It asks you for your API key, your dashboard password and your Telegram details, and writes them to files on that machine.
• Those never reach us. The only thing the installer sends back is the public address of your finished dashboard, so your portal page can show you the link.
• The API key you create is a Hyperliquid API wallet: it can open and close positions and cannot withdraw funds. Even full control of the server cannot move money out of your account.
• There is no access for us to remove afterwards, because none was ever granted. If you ever want to be certain, cat /root/.ssh/authorized_keys on your own server shows every key that can log in.
• Kill switch: stop the bot from your dashboard, or revoke the API wallet in Hyperliquid. Note that stopping the bot does not close open positions — close those yourself from the dashboard or on the exchange.

If we host it for you

On the €19/month hosted plan the server is ours to maintain, so we do have administrative access to it — that is what you are paying for. Your funds still are not: they stay in your own Hyperliquid account, reachable only with a key that cannot withdraw. Ask us at any time and we will hand you the server and its configuration so you can run it yourself.

What if we get hacked — or disappear?

There is nothing of yours on our systems to steal: no customer funds, no customer keys. And if we vanished tomorrow, your bot would keep running on your own server — it does not depend on us. The software is open source (Freqtrade) and yours to keep.

This website

Served over HTTPS (TLS 1.3) behind Cloudflare with strict security headers (HSTS, CSP, frame and content-type protections). No advertising trackers. The only personal data we store is the email address you submit — see the Privacy Policy.

Questions

Write to us at the contact form — you reach the person who runs these systems, not a support queue.