Security
A key that cannot withdraw cannot lose you money
That sentence is the whole design. Everything below is how it is enforced rather than promised.
What the key is allowed to do
Read account and positions
To show your balance, your open positions and your real fee tier.
Futures trading
To place the orders you ask for, and only those.
Enable Withdrawals
Refused outright. A key with this permission is rejected when you add it.
Permits Universal Transfer
Refused outright, for the same reason: it can move funds between wallets.
The two refusals are checked when the key is added. This is not advice about how to configure it: a key carrying either permission is rejected.
How it is held
Encrypted at rest
Keys are stored AES-256 encrypted and decrypted only in memory, only to sign a request to your exchange. They are never written to a log and never shown back to you, not even to the account that added them.
Dangerous permissions refused
Adding a key with withdrawal or universal transfer permission fails with an explanation. It is not accepted with a warning, because a warning is something people click past.
One IP to allow
Every request to your exchange leaves from a single fixed address, so you can restrict the key to it. A key locked that way is useless to anyone who copies it.
Revocable in one click, by you
Delete the key on the exchange and access ends immediately, with nothing to ask us for. Nothing is kept that you cannot take back.
Your money never moves through here
There is no wallet, no custody and no deposit. Funds stay on your exchange for the entire life of a trade, and no code here is capable of moving them.
Checked before it matters
Whether a key can actually trade futures is verified when you add it, rather than discovered by an order being rejected at the worst moment.
The questions people actually ask
No, and not as a matter of policy: a key with withdrawal permission is refused when you try to add it, so a working connection cannot have that permission in the first place. There is also no code here that could move funds if it did.
Keys are stored encrypted, so a copy of the database alone does not yield usable keys. The permissions we insist on are the second layer: even a fully usable key cannot withdraw, and if you have IP-restricted it, it cannot be used from anywhere else at all. That is why the IP restriction is worth the two minutes it takes.
No. Every order is one you asked for. The optional automatic chase only re-prices an entry order you already placed, within the limits you set, and it stops when it fills or when your time runs out.
No. The free calculators need no account. An account with no key connected still sizes trades and shows live public prices. A key is only needed to read your own fee tier and to place orders from here.
An email address, your billing details if you subscribe, and the trades you make while connected, so history and statistics work. You can export all of it and you can delete the account.
Found something?
If you believe you have found a security problem, write to info@zrisk.eu with enough detail to reproduce it. Reports are read by the person who wrote the code, and you will get a reply. Please do not test against another user's account.
Start without a key at all
An account gives you the calculator on live prices with nothing connected. Add a key later, if and when you want to place orders from here.