Your keys stay yours.
So does your money.
Your money stays in your own exchange account. Stralines only needs permission to trade, never to withdraw, and every key it stores is encrypted.
Support 24/7 by the Stralines Support Team: WhatsApp +91 955 955 0040 or support@stralines.com
Built so your money
stays yours.
◆Your money never leaves your exchange
Bots trade on your own exchange account through an API key. Stralines never holds your funds.
No withdrawal access
The key only needs to read your account and place or cancel orders. Stralines refuses API keys that allow withdrawals (Binance, Bybit). On other exchanges, use a trade-only key: we never need withdrawal access.
Keys encrypted with AES-256-GCM
Your API keys are encrypted before they are stored. The decryption secret is held outside the database, separately scoped and rotated.
Stop-loss put back automatically
If the exchange drops your stop-loss, we put it back automatically. Stralines checks right after placing it, then every two minutes for every open position.
Safety Net risk limits
Limits such as a daily loss limit and a cap on open exposure are checked before every order reaches the exchange.
Your rules decide entries and exits
Trading Rules let you control when your bots may enter and exit a trade. The software follows them the same way every time.
2FA, passkeys and bot protection
Protect your Stralines account with two-factor authentication or a passkey. Sign-up and sign-in are guarded by Cloudflare Turnstile against automated attacks.
Admin access gated at the edge
Admin and operator pages are protected at the network edge before traffic reaches the platform, and kept separate from the pages customers use.
Internal security review runs continuously as part of the engineering operating model. External quarterly review is on the roadmap as the platform scales.
The questions traders
actually ask.
Orders already placed stay on the exchange: your stop-loss and take-profit sit there, not on Stralines. If the exchange drops a stop-loss, Stralines puts it back automatically; if Stralines is unreachable, the orders already on the exchange keep protecting you.
Read and trade only. Stralines never needs withdrawal access. On Binance and Bybit it checks the key and refuses one that allows withdrawals. On other exchanges, create the key with trading permission only.
Keys are encrypted at rest with an application secret held outside the database. Operator surfaces do not expose decrypted key material, and access is logged.
Production data sits within the Stralines infrastructure footprint, geo-located primarily in the regions our customers operate from. Data-at-rest encryption is on by default at the storage layer.
Turn on two-factor authentication (2FA) or sign in with a passkey. Sign-up and sign-in are also guarded by Cloudflare Turnstile, which blocks automated sign-in attempts.
Support 24/7 by the Stralines Support Team. WhatsApp +91 955 955 0040 or email support@stralines.com.
Email security@stralines.com with a description and a reproduction path. Acknowledgement within 1 business day, initial assessment within 5.
Found something?
Tell us.
Email security@stralines.com with a description and a reproduction path. Acknowledgement within 1 business day, initial assessment within 5.