Prop Firm Guard privacy and data boundaries

Effective 2026-09-05

Local risk calculations

The dual-boundary engine, spike simulator, contract sizing, payout calculations, manual news lockouts, and clearance verdicts run in your browser. TDC does not need broker passwords, prop-firm dashboard credentials, or trading API secrets for these calculations.

Local account profiles

Five account profiles are encrypted with AES-256-GCM using a non-extractable browser key stored by IndexedDB. The basic cross-tab cockpit snapshot remains local browser state so tabs can synchronize quickly.

Remember my numbers (signed-in accounts)

When you are signed in and "Remember my numbers on all my devices" is on (Account page), TDC keeps a copy of the numbers you entered (selected firm, account balances and limits, cushion, platform checklist, ledger and your five account profiles) with your TDC account, so they fill in by themselves on any device you sign in on. It never includes passwords, broker logins or trading API secrets. Turn it off at any time; the copy is then removed the next time TDC saves. Effective 2026-10-20.

Optional encrypted cloud backup

Cloud backup is opt-in. Your passphrase is processed in the browser with PBKDF2-SHA-256 and is never sent to TDC. The server stores only the encrypted profile envelope.

Optional voice and AI intent parsing

Speech recognition is supplied by the browser. Typed audits work without microphone access. Restricted cloud intent parsing is off by default and cannot calculate, predict, or change a verdict.

Read-only data relay

The normalized relay accepts account-state measurements, timestamp, and sequence. It does not accept order-execution commands or broker credentials. Stale or disconnected live data blocks clearance.

Diagnostics and entitlements

Anonymous diagnostics are off by default. The Guard verifies an active paid Pro subscription or authorized complimentary grant. No free-trial entitlement is accepted.