Security

SECURITY.md

Security

1. Official download

Only download FlowState Trading Journal from the official Gumroad product page:

https://finega.gumroad.com/l/flowstate-trading-journal

2. Unsigned Windows app notice

FlowState Trading Journal is an independent unsigned Windows desktop application.

Windows SmartScreen or antivirus warnings may appear. This can happen with new or low-distribution EXE files.

This does not automatically mean a file is unsafe, but users should only run software they trust.

3. Local-first behavior

No login required
No broker API required
No exchange API keys requested
No withdrawal permissions
Data stored locally in AppData

4. Recommended checks

Download only from official Gumroad
Scan with Microsoft Defender or VirusTotal if desired
Do not run files from unknown mirrors
Do not run if the file was modified by an unknown source

5. Reporting security concerns

Contact Finega through:

Gumroad: https://finega.gumroad.com
X: https://x.com/thefinega

6. Important warning

If you do not trust the file, do not run it.

There aren't any published security advisories