Private, non-commercial testing · not for sale
What leaves your machine
Every request the Companion desktop app makes to us, and everything in it. Your VPS and its MetaTrader terminals make none.
- Licence activation
once, when you enter your key - Your product key, the machine fingerprint, the app version, your operating system's name, version and architecture, and which version of the terms you accepted and when.
- Licence check
at start-up, then about every 12 hours - Your product key, the machine fingerprint and the app version. The answer is a signed statement of your licence, which the app hands to your own VPSs.
- Heartbeat
about every 6 hours · can be switched off - The machine fingerprint, the app version, how long the app has been running, and your operating system's name, version and architecture. To stop it, turn off “Check in with the licence service” in Settings.
- Crash report
when the app hits an error · can be switched off - The machine fingerprint, the app version, the error message and where in the code it happened. Keys, tokens and passwords are removed by name, but error text is not otherwise filtered, so it can include a file path containing your computer's username. To stop them, turn off “Send anonymous crash reports” in Settings.
Never sent: trades, orders, positions, account numbers, balances, equity, broker names or servers, VPS addresses, or any password. We have no endpoint that could receive them.
- The product key
- Sent as you typed it, over HTTPS, on activation and on each licence check. On your machine it is kept in your operating system's encrypted storage.
- The machine fingerprint
- A hash of your computer's name, operating system, architecture and username. It ties a licence to a machine. It is not salted, so someone who already knows those four things could work it out.
- Your VPS
- Talks to your desktop app and your other VPSs, never to us. Setting one up downloads from MetaQuotes (MetaTrader 5), Docker Hub (the terminal image), NodeSource and Docker's package repository, and Ubuntu's mirrors. Those are third parties, not us.
Something here look wrong?
This page is checked against the app's source every time the site is built. If you find a request it does not describe, tell us.