Your security and privacy are very important to us. Here are the key security features explained:
23
ความปลอดภัยและความเป็นส่วนตัว
รหัสผ่าน 2FA และการคุ้มครองข้อมูล
ในบทนี้
1. Overview
คำแนะนำทีละขั้นตอน
1
Choose a Strong Password
Choose a password with at least 12 characters. Use uppercase, lowercase, numbers, and special characters. Avoid simple passwords like "123456" or "Password". Remember your password or store it in a secure password manager.
2
Two-Factor Authentication (2FA)
This is an additional security layer. After your password, you must enter a code that an app on your smartphone displays. This makes it almost impossible for hackers to access your account. We strongly recommend enabling 2FA! Go to your profile page and follow the instructions.
3
Save Backup Codes
When you enable 2FA, you get 10 backup codes. You need these if you lose your smartphone. Store these codes in a secure place (e.g., in your password manager or encrypted file). If you lose these codes and your smartphone, you can't access your account!
5. Broker Data Security
When you connect your broker account to Singularity Trader, your login credentials (API keys, tokens) are stored encrypted. The encryption is so strong that even our administrators can't read your data. We can only use your data for what you explicitly allow (e.g., retrieving trades).
6. Privacy in the Community
When you share your trades with the community, your personal data (like exact position sizes) is not displayed. Only the trades with the tag (strategy) you share are visible. Your account balance always remains private.
7. Vault mode in the sTraderZ.com client
In vault mode, the trading data of an account is stored on sTraderZ.com only in encrypted form between processing runs. Currently only testers can move an account into the vault.
What is encrypted? The trading data archive and the inbox with new retrievals. In plaintext are the account master data, your Flex access for the automatic retrieval, device metadata and the account log (without content).
Sessions: To run calculations, your device releases the key for one session (usually minutes). Only then is the data in plaintext in the database; afterwards the plaintext is deleted. The client’s start page shows pending retrievals, and after 7 days a notification reminds you as well.
Devices and recovery code: Only your devices and your recovery code hold the key. Keep the code safe; the client asks every 180 days whether you still have it.
Account log: Under Profile → Security (section “Vault”) and in the client you can see when sessions, device changes and mode changes took place, without the content of your trading data.
Limitations:
• There are no cycle corrections (split, merge, reassign, delete) for vault accounts.
• The client does not yet show positions, performance and dividends.
• Tax reports for vault accounts are created in the client under “Tax reports”. The figures stay on your device, even after the way back. You can also create a PDF (summary or proof). It is saved on your device and opens in the viewer, where you can save or print it. The PDF is generated on sTraderZ.com during the session and deleted there once it has been collected.
Way back: In the client you can return an account to normal mode at any time.
Delete vault: If you have lost all devices and the recovery code, delete the vault under Profile → Security with your password, a confirmation word and, if enabled, two-factor authentication. The accounts are then empty in normal mode, and the Flex retrieval fetches the last 365 days again.
What is encrypted? The trading data archive and the inbox with new retrievals. In plaintext are the account master data, your Flex access for the automatic retrieval, device metadata and the account log (without content).
Sessions: To run calculations, your device releases the key for one session (usually minutes). Only then is the data in plaintext in the database; afterwards the plaintext is deleted. The client’s start page shows pending retrievals, and after 7 days a notification reminds you as well.
Devices and recovery code: Only your devices and your recovery code hold the key. Keep the code safe; the client asks every 180 days whether you still have it.
Account log: Under Profile → Security (section “Vault”) and in the client you can see when sessions, device changes and mode changes took place, without the content of your trading data.
Limitations:
• There are no cycle corrections (split, merge, reassign, delete) for vault accounts.
• The client does not yet show positions, performance and dividends.
• Tax reports for vault accounts are created in the client under “Tax reports”. The figures stay on your device, even after the way back. You can also create a PDF (summary or proof). It is saved on your device and opens in the viewer, where you can save or print it. The PDF is generated on sTraderZ.com during the session and deleted there once it has been collected.
Way back: In the client you can return an account to normal mode at any time.
Delete vault: If you have lost all devices and the recovery code, delete the vault under Profile → Security with your password, a confirmation word and, if enabled, two-factor authentication. The accounts are then empty in normal mode, and the Flex retrieval fetches the last 365 days again.