Your logins stay on your computer.
Your broker logins never leave your computer. Orders go straight from your computer to your broker. Our server only knows who you are, your plan and your computer.
Local first
TwinCopier is a desktop app for macOS, with Windows coming soon. It runs on your computer and talks to your broker from there.
No cloud copier sits in the middle. Our server never places orders, and your trades are not sent to us.
Broker logins
Your broker logins are sent only to your broker. Our server never sees them.
- Tradovate: you log in on Tradovate's own page, inside the app. We never see your password. The session stays in memory while the app runs. It is never written to disk.
- Rithmic: you type your username and password into the app. They are kept in the system keychain on your computer.
- TopstepX: you enter your username and your API key from ProjectX. They are kept in the system keychain on your computer.
The system keychain is the encrypted store your operating system keeps for passwords. Your Telegram bot token, if you use Telegram alerts, is kept there too.
Only what it needs
TwinCopier reads only what it needs to copy and to show your accounts: orders, fills, positions, balances and P&L. It shows no charts.
Crash reports are off by default. You can turn them on in Settings › App.
Safe installs, careful updates
Download the app only from this site or your account page. We never send installers by email or chat. The first time you open it, macOS asks you to confirm in System Settings. That is a one-time step.
The app checks for new versions by itself and tells you when one is out. You choose when to install it. Install when you are flat, never in the middle of a trade.
What our server stores
- Your email address.
- A hash of your password, never the password itself.
- Your plan and its status.
- The computer you use the app on, and your login sessions.
Payment details stay at Stripe. We never see your full card number. Full details are in the privacy policy.
Protect yourself
- Use a strong, unique password for us and for your broker. Turn on two-factor login at your broker.
- Download the app only from our download page.
- We will never ask for your broker password, API key or 2FA code. Not by email, chat or Discord.
Report a security issue
Email security@twincopier.com. This mailbox is only for security reports.
Tell us what you found and how to see it again. Please do not include passwords or keys.