Privacy Policy

Trade8 is a product line of the Sentin8 platform for institutional trading. This policy explains what personal data Trade8, the trade8.dev website, and the underlying Sentin8 platform process, why, and the guarantees that protect it.

The short version​

• The trade8.dev website is fully static. It sets no cookies, embeds no third-party trackers, and sends no analytics about your visit anywhere.
• Trade8 deployments run on the Sentin8 platform. The operating tenant is the data controller for the personal data in its environment; the platform stores that data only inside the tenant's own database, isolated by mandatory row-level security.
• We do not sell, rent, or share personal data with third parties for marketing or advertising. Ever.

What Trade8 processes​

Trade8 services run as part of a Sentin8 deployment operated by a tenant organization (for example a trading firm). The tenant is the data controller for the personal data inside its environment.

How the platform protects that data​

The security measures below apply to every Trade8 deployment by construction - they are inherited from the Sentin8 platform and are not optional configuration:

1. Mandatory tenant isolation. Every tenant table is protected by PostgreSQL row-level security with FORCE ROW LEVEL SECURITY. No role on the platform carries BYPASSRLS. A database connection simply cannot read another tenant's rows.
2. Post-quantum TLS, exclusively. Every connection - browser to edge, service to service, service to database - negotiates post-quantum key exchange (X25519MLKEM768) with ML-DSA-65 certificate signatures. There is no classical fallback.
3. One identity plane. Sentin8:Auth is the only token issuer. No service mints its own credentials or sessions.
4. Live authorization. Access is decided per request against live role assignments - never against long-lived embedded claims.
5. Certificate-only workload identity. Every server process authenticates with a cryptographic client certificate. There are no database passwords, static API keys, or client secrets anywhere on the platform.
6. No plaintext secrets. Payment credentials, provider tokens, and private keys are stored by reference only - the database never holds the secret material.

Cookies and tracking​

trade8.dev itself serves static pages. It does not:

• set first-party cookies (besides any your browser stores for the site's own operation),
• load third-party analytics, ads, or tracking scripts,
• fingerprint visitors.

Tenant-hosted sign-in pages (the Sentin8:Auth hosted UI) use strictly necessary session cookies only, scoped to the tenant's own domain. Those cookies exist to keep you signed in and to protect against cross-site request forgery. They are never used for advertising or profiling.

Data retention​

We retain:

• This website: nothing. There is no server-side visitor log for trade8.dev beyond what the hosting provider (GitHub Pages) processes to serve pages.
• Tenant environments: retention is set by the tenant, the data controller. The platform provides the audit and deletion surfaces the tenant needs to implement its own retention policy.

Your rights​

Because the tenant is the data controller for its environment, requests about personal data inside a tenant environment (access, correction, deletion, export) should be directed to that tenant. We do not have access to tenant environment data - the isolation described above is enforced against us too.

For questions about this policy or the trade8.dev website itself, contact the maintainers via the repository's public channels.

Changes​

This policy may be updated to keep it accurate. The canonical version always lives at this address.

Architecture & Design: Trade8 and the Sentin8 platform it runs on were designed by Hamid Jahanzad.