Security and responsible disclosure

What we do

• All traffic is encrypted (HTTPS). Passwords are never stored by us in readable form.
• New passwords must be at least 10 characters and cannot be a common password.
• Every database table has access rules, so people can only read their own personal information, and staff access is limited to what each role needs.
• Your uploads, such as trading statements, are stored privately and are not public.
• We review third-party tools, keep software up to date and watch for security problems.

Found a security problem?

Please email us with what you found and how to reproduce it. We will reply within 3 working days, keep you informed, and fix confirmed problems as quickly as we can.

Security contact: support@marketsmaverick.com

Please

• Do not access, change or delete anyone else's data, and stop as soon as you have shown the problem exists.
• Do not run automated attacks, spam, or anything that slows the site for other people.
• Give us reasonable time to fix the problem before you tell anyone else.

If you follow these rules and act in good faith, we will not take action against you. We do not run a paid bug bounty, but we are grateful and will thank you if you wish.