Security & privacy

Our approach to security and privacy.

We describe our practices honestly — what is implemented today and what is planned. We do not claim certifications we don’t hold, and we clearly mark forward-looking items so you can tell the difference.

This marketing site does not store brokerage credentials.

The TradePeregrine marketing website does not collect, request, or store brokerage login credentials, account passwords, or payment card details. Any broker connectivity offered within the product, where supported, is handled separately from this site and subject to its own controls and disclosures.

Practices

What we do, and what’s on the way.

Each item is labeled as implemented or planned. Planned items are forward-looking and may change.

Encryption in transit

Implemented

Traffic to the site is served over HTTPS/TLS so data in transit between your browser and our servers is encrypted.

Server-side secrets

Implemented

API keys and other secrets are kept in server-side environment variables and are never exposed in client code or shipped to the browser.

Content Security Policy & secure headers

Implemented

The site sets a Content Security Policy alongside other secure HTTP response headers to reduce the risk of common web vulnerabilities.

Role-based access

Planned / forward-looking

Role-based access controls for team and enterprise workspaces are part of our access model. [Placeholder — specific roles and permission scopes are being finalized.]

Authentication & account protection

Planned / forward-looking

Account authentication and additional protections are part of the product roadmap and will be documented as they ship. [Forward-looking.]

Cookie consent

Planned / forward-looking

A cookie consent mechanism governs non-essential cookies and analytics, letting visitors make a choice about optional tracking. [Placeholder — final consent flow to be confirmed.]

Data-retention approach

Planned / forward-looking

We aim to collect only what is needed and retain it no longer than necessary for the stated purpose. A full retention schedule will be published in our privacy policy. [Forward-looking.]

A note on forward-looking statements

Items marked “Planned / forward-looking” describe our current intentions and roadmap. They are not guarantees, and timelines or specifics may change. This page describes our security and privacy approach and is not a certification, audit report, or contractual commitment. Formal terms live in our privacy policy and terms of service.