Access & privacy

Reach it from anywhere. Your keys stay put.

The same engine over a browser, a phone paired by QR on your own network, updates that verify their own signature — and a straight answer about what never leaves your machine.

The desktop app is the source of truth

QuantumCat runs natively on macOS and Windows, and that is where your broker sessions and credentials live. Everything below is a way to reach that terminal — never a second copy of it holding its own keys.

The same terminal, in a browser

An embedded gateway serves the built UI over one WebSocket to the same core managers the desktop app uses. The command names, arguments and results are identical to the desktop's — it is the same engine, not a reduced web edition, which is why a bot, a screener or a risk cap behaves the same on both. That is also why the app can run headless on a server and still be driven from a browser.

Your phone, paired by QR

The desktop can host a LAN endpoint for a phone companion. Pairing is a QR scan that mints a single-use token for that device; the phone then holds a device token, not your broker credentials. It's off by default and runs only while you enable it, on your own network. Unlinking a device closes its live sockets immediately and its token stops validating that instant.

The phone app is a companion to the desktop, and does not ship in v1.

Updates arrive by themselves

On launch the app checks for a newer signed build, downloads it silently, and shows a “restart to update” pill. Every package is signed with a key that never leaves the developer's machine, and the app verifies that signature against a public key compiled into the binary before it will install anything. A build that isn't signed by that key is refused — there is no override.

Your data stays yours

• Recorded ticks, the session timeline, journals, bots and screeners are files on your machine — not rows in someone's cloud.
• Credentials never leave the OS keychain, and never travel to QuantumCat's servers.
• The licensing service sees an account, not a book. It answers whether your subscription is active. It is not sent your trades, positions or P&L.
• Anonymous diagnostics are scrubbed before they leave, and carry no trade contents or personal identifiers.

Accounts and access

Sign in with an email and password; the terminal re-checks entitlement periodically. If it can't reach the licensing service it keeps working on the last verified answer for a bounded window rather than locking you out mid-session over a network blip — and it says plainly that it's running offline, with how long is left, instead of pretending everything is fine.