Prop Firm Guard privacy and data boundaries

Effective 2026-09-05

Local risk calculations

The dual-boundary engine, spike simulator, contract sizing, payout calculations, manual news lockouts, and clearance verdicts run in your browser. TDC does not need broker passwords, prop-firm dashboard credentials, or trading API secrets for these calculations.

Local account profiles

Five account profiles are encrypted with AES-256-GCM using a non-extractable browser key stored by IndexedDB. The basic cross-tab cockpit snapshot remains local browser state so tabs can synchronize quickly.

Optional encrypted cloud backup

Cloud backup is opt-in. Your passphrase is processed in the browser with PBKDF2-SHA-256 and is never sent to TDC. The server stores only the encrypted profile envelope.

Optional voice and AI intent parsing

Speech recognition is supplied by the browser. Typed audits work without microphone access. Restricted cloud intent parsing is off by default and cannot calculate, predict, or change a verdict.

Read-only data relay

The normalized relay accepts account-state measurements, timestamp, and sequence. It does not accept order-execution commands or broker credentials. Stale or disconnected live data blocks clearance.

Diagnostics and entitlements

Anonymous diagnostics are off by default. The Guard verifies an active paid Pro subscription or authorized complimentary grant. No free-trial entitlement is accepted.