VERIFY IT YOURSELF
Don't take our word for it.
Aurexion runs on your own machine. Your strategies, data and results never go to us; an outside AI provider gets them only if you choose one and share them. You should not have to take that on trust. This page lists every connection the app makes and what each one carries, and shows you how to watch it yourself with free, open-source tools.
The app is still in development. This page shows the method and the list we are building to; the final list is checked before the first release and published with it and with every update.
What leaves your machine, and what never does
| Your data | Sent anywhere? |
|---|---|
| Strategy source code and compiled strategies | Never to us. To an outside AI provider only if you choose one and share it. |
| Backtest, optimisation and portfolio results | Never to us. To an outside AI provider only if you choose one and share it. |
| Research and your own data files | Never to us. To an outside AI provider only if you choose one and share it. |
| Strategy settings and trading parameters | Never to us. To an outside AI provider only if you choose one and share it. |
| Usage statistics, crash reports, analytics | None are collected |
| Your exchange keys | Never sent. They sign your requests to your exchange on your machine. |
| Your orders | Yes, to your exchange only, when you trade live. |
| Licence check | Yes: your licence key and an anonymous machine ID, nothing else. |
| What you type into the assistant | Only if you choose an outside AI provider; then it goes to that provider. With a local model, it stays on your machine. |
Every connection the app makes
| Destination | Why | When |
|---|---|---|
Your exchange's trading servers (for Bybit: api.bybit.com, stream.bybit.com, and the demo versions) | Live prices, your orders, positions and balance | Paper and live trading |
Exchange market-data servers (for Bybit: public.bybit.com; for Kraken: api.kraken.com) | Downloading price history. The request names the coin and dates, nothing else. | Only when you download data or run research |
The licence server (api.keygen.sh) | Checking your licence | At start, then now and then. |
| Your chosen outside AI provider, if any | The assistant | Only if you set one up instead of a local model |
Nothing else. There is no Aurexion server that receives your work.
The tools
All three are free and open source.
- Portmaster (Windows, Linux) — the easiest place to start. It shows which programs connect where, and lets you block any connection with one click. safing.io
- OpenSnitch (Linux) — asks you every time a program tries to connect out, so nothing goes unnoticed. github.com/evilsocket/opensnitch
- Wireshark (Windows, Linux, macOS) — for the thorough: records every packet, so you can see each destination, name lookup and how much was sent. wireshark.org
How to check
- Install a monitor. Portmaster or OpenSnitch for a clear per-program view; Wireshark if you want every packet.
- Start watching before you start Aurexion. That way you see its very first connection too.
- Use the app the way you normally would. Start it, write and edit a strategy, compile it, run a backtest and a portfolio, run research, save and load your work, ask the assistant something, start a paper instance, and connect your exchange's demo account.
- Compare what you see with the list above. For each connection: which program made it, where it went, when, and how much it sent. Compiling, backtesting and research should show no outside connection at all.
- Block what you like and see what still works. Block everything but your exchange, and backtesting, research and strategy work keep working. Only what needs the outside world (live prices, orders, data downloads, the licence check after the grace period) stops.
What a network monitor can and cannot prove
Connections to exchanges and other services are encrypted. A monitor shows where each one goes, when, and how much is sent, but not what is inside it. That is still a strong check: a strategy, a set of results or a data file would show up as traffic to somewhere not on the list, or as far more traffic than an order or a licence check needs. It is an independent check, not a mathematical proof, and we say so plainly.
Found something that is not on the list? Tell us at hello@aurexionlabs.net, and it gets fixed or explained here.