A fair question to ask any app, and more so a small one. Here is what a Restrike connection can and can’t do, what enforces it, and how to undo it. The connection is read-only, and Restrike never places a trade or moves money.
Restrike reads your positions and trades so you don’t have to type them. Two separate things stop it from doing anything more.
Restrike connects through SnapTrade, a company that links apps to brokerages. Every Restrike connection is opened with SnapTrade’s read-only setting, so the access your broker grants carries no right to place, change or cancel an order, or to move a dollar. That holds even if Restrike’s own code were wrong: it’s a limit on the permission, not a promise about behaviour.
On top of that, Restrike’s server keeps a fixed list of the calls it’s allowed to make to SnapTrade, and refuses anything else. An automated test checks the list every time the code changes and fails if anything that could place an order is added. This is the whole list.
| What Restrike may ask SnapTrade | Why |
|---|---|
| Set up your Restrike record | Once, when you first connect |
| Open the sign-in page for your broker | So you can connect, or reconnect |
| List your connected brokerages | To show them on the Portfolio tab |
| List your accounts | To know which accounts to read |
| Read an account’s positions | Your holdings table |
| Read an account’s balances | Cash and account value |
| Read an account’s trade history | Your log, rolls and closes |
| Read the orders your broker has already recorded | Same-day trades, at brokers that report them |
| Ask SnapTrade to fetch a fresh copy of your positions | When a stored copy is out of date |
| Remove one brokerage connection | When you press Disconnect |
| Delete your Restrike record | When you delete your account |
Eleven calls. None names a quantity, a price or an amount to send, so none can place an order or move money.
You sign in on SnapTrade’s page, or, where your broker offers a sign-in for apps, on your broker’s own page. Nothing you type there passes through Restrike. What Restrike keeps is an opaque token, and that token alone opens nothing: reading through it also takes Restrike’s own key with SnapTrade, which is kept in the hosting provider’s secret store, not in the database.
No card details (Stripe takes payment), no account passwords at all (sign-in is by emailed link, and sessions are stored only as scrambled hashes), and no permission to trade. What is stored to keep your log in step across devices, row by row, is on the privacy page. Your trade history is read to work out your cycles and isn’t kept.
Restrike is one person: me, Collin. Running the site means I have access to the database it runs on, the same as the operator of any app that keeps your data in step across devices. I don’t browse anyone’s positions or log. The one time I look is when you ask me why something isn’t coming in right, and then only at what that question needs.
Nothing in your account is used for anything else, shared, or sold, and there’s no advertising on this site.
SnapTrade connects many investing apps to brokerages. By its own account it is SOC 2 Type II certified, has its systems tested by outside security firms, encrypts data in transit and at rest, and encrypts with AWS’s key service any brokerage login it has to keep, which it needs only where a broker offers no sign-in for apps. Those are SnapTrade’s statements, on its security page, and worth reading there.
If your broker asks which accounts to share when you connect, pick a smaller one first. Look at exactly what arrives in the Portfolio and the Log, then add the rest if you’re comfortable.
Tracking works without a brokerage. You can log positions by hand, or look around with sample positions first.
Disconnect is on the Portfolio tab’s Brokerages card, and it works whether or not you have a subscription, because a lapsed plan should never trap a live link to your broker. It also tells SnapTrade to forget the connection. Many brokers list connected apps in their own security settings, so you can revoke it from there too.
Deleting your account cancels any subscription, tells SnapTrade to forget you and every connection, and erases your log, holdings and settings. The privacy page says what, if anything, is kept.
Still unsure? Email support@userestrike.com and ask me anything about it. To report a security problem, use the same address with “Security” in the subject.