Security at Shareabull
How we protect your account, your research, and your exchange connections.
Read-only exchange access, always
When you connect an exchange (Binance, MEXC, CoinEx), we only accept read-only API keys. We can see balances and trade history to power your portfolio and journal, we can never place orders, transfer, or withdraw funds. We recommend creating keys without withdrawal permissions, exactly as the exchanges themselves advise.
API keys encrypted at rest
Exchange API keys are encrypted with a dedicated server-side secret before they are stored. They are never exposed to your browser, never logged, and never shared with third parties.
Revocable at any time
Disconnect an exchange in Account → Connections and the stored key is deleted immediately. You can also revoke the key from your exchange's own settings at any time, we recommend doing both if you ever suspect misuse.
We don't sell or share your data
Your charts, journal, and portfolio data are yours. We do not sell personal data, we do not run third-party advertising or tracking cookies, and exchange data is used solely to render your own portfolio and history back to you.
Encrypted in transit, hardened at rest
All traffic runs over HTTPS. Authentication is handled by Supabase (GDPR-compliant infrastructure) with hashed passwords; payments are processed by Stripe, so card details never touch our servers. Database access is restricted and server access is limited to the operations team.
GDPR by design
You can export all of your data or delete your account (and everything with it) from Account → Data & Privacy at any time. We operate under Norwegian law and GDPR, see the Privacy Policy for full details.
Found a vulnerability?
We welcome responsible disclosure. If you believe you have found a security issue in Shareabull, please email us with enough detail to reproduce it. We will acknowledge your report promptly, keep you informed while we fix it, and credit you if you wish. Please do not access other users' data or disrupt the service while testing.
Report a security issueRelated: Privacy Policy · Terms of Service · About us