Account and security

You only need an email address and a password to sign up. Identity verification is not required.

Sign up with email

1. Open the sign-up page.
2. Enter your Email and Password. Password requirements:
   • At least 8 characters.
   • At least 3 of: uppercase letters, lowercase letters, numbers, special characters.
3. Select I have read and agree to the Terms of Service and Privacy Policy and click Create account.
4. The page shows Check your verification email. Open the link in the email. Once it is verified, you are signed in and taken to Personal Center.

If the email does not arrive, click Resend verification email on that page. You must wait at least 60 seconds between sends. Each resend invalidates the earlier links, so use the latest email.

Sign up with Google or GitHub

1. On the sign-up or login page, click Sign up with Google or Sign up with GitHub and authorize on the provider's page.
2. The first time, you see Create your account. Accept the terms and click Agree and create account.

Your third-party account must have a verified email address; otherwise you see Your third-party account has no verified email. Accounts created this way have no password. After you verify your email, you can set one in Account Settings.

Sign up with a MetaMask wallet

1. On the sign-up or login page, click Sign up with MetaMask and sign in your wallet. Signing does not send a transaction and costs no gas.
2. If this wallet address does not have an account yet, you see Create your account. Enter the email address where the confirmation link should go, accept the terms, and click Accept and create account. Your account is created and you are signed in.
3. Open the link in the confirmation email to add the email to your account. Until you do, features such as contest registration are unavailable.

From then on, sign with the same wallet to log in. Accounts created with a wallet have no password; when you need to verify your identity again, choose Verify with your wallet.

Log in

1. Open the login page, enter your Email and Password, and click Log in.
2. If two-factor authentication is on, enter the 6-digit code from your authenticator or a recovery code in the next step, then click Continue.

Remember me is selected by default. If you clear it, you stay signed in only for the current browser session.

After too many wrong passwords, login is temporarily limited; wait and try again. If you forgot your password, you can reset it.

Reset your password

1. On the login page, click Forgot password?, enter the email you signed up with, and click Send reset link.
2. Open the link in the email, enter a New password (same requirements as sign-up), and click Reset password.
3. The page shows Password reset — please log in with your new password.

For security, the page says the link was sent whether or not the email is registered.

Manage your password, two-factor authentication, and signed-in devices on the Security tab of Account Settings.

Change or set your password

1. Open Account Settings → Security.
2. Click Change password, enter your Current password, New password, and Confirm new password, and submit.

If you signed up with Google, GitHub, or a wallet and have never set a password, this shows Set a password instead, and you need to verify your email first.

After the change, your sessions on other devices are signed out, and the page shows how many. If you forgot your current password, click Forgot your current password? in the dialog and a reset link is sent to your email.

Turn on two-factor authentication

Two-factor authentication (2FA) uses codes from an authenticator app. Google Authenticator is recommended; 1Password and Microsoft Authenticator also work. Your account must have a password before you turn it on.

1. On the Security tab, find Two-factor authentication (2FA) and click Turn on 2FA.
2. Enter your current password and click Start setup.
3. Scan the QR code with your authenticator app. If you cannot scan it, copy the key on the page and add it manually.
4. Enter the 6-digit code shown in your authenticator and click Turn on.
5. The page shows Recovery codes (shown once - save them somewhere safe). Click Copy all, store them safely, and click I have saved them.

Once it is on, every login needs a code or a recovery code. When you change phones, use Re-bind or Turn off 2FA in the same place.

Manage signed-in devices

Signed-in devices lists all active sessions. The one you are using is marked This device.

• Click Sign out on a row to end that session.
• Click Sign out other devices to keep only the current device.

Verify your identity again

Before sensitive actions such as adding an email or turning on two-factor authentication, you see Verify your identity and are asked for your password, an authentication code, or a wallet signature. After you verify, you are not asked again for sensitive actions for 10 minutes.

You do not need to verify your identity to sign up or to register for a contest. You need to complete Basic identity verification in three cases:

• After advancing to the live final in the Strategy Challenge, before the list confirmation deadline. The advancement card on your contest panel has a Verify identity button; the ID you uploaded at registration does not count.
• To claim a prize after winning in the Strategy Challenge.
• To apply for group funding.

Verification is done on the page by a third-party verification service. Have your own identity document ready. One identity can verify only one account.

Verify your identity

1. Open Account Settings → Identity and click Verify now. You also reach the same page by clicking Verify identity on the prize page or on the funding page.
2. Follow the on-screen steps to photograph or upload your ID and complete the face check.
3. After you submit, the page shows Verification under review. Results usually come quickly. You can leave the page and check later under Account Settings → Identity.

Verification statuses

PM accounts see Notifications in the left navigation, with the unread count next to the menu item.

View and act on notifications

1. Open Notifications. You can filter by type or select Unread only.
2. Click a notification to go straight to the page where you act on it. The notification is marked as read at the same time.

Click Mark all as read to clear all unread notifications at once.

Notification preferences

In Account Settings → Notifications, choose the notifications you want to receive: Deposits & transfers, Risk alerts, Settlement & carry, and Product updates. Then click Save notification preferences.

Get notifications in Telegram

New notices from your notification center can also go to your Telegram. Each message carries the full notice and ends with a line naming the website to check it on — there is no link. Reading a notice in Telegram does not mark it as read in your notification center.

1. Open Account settings → Notifications. Under Telegram notifications, click Connect Telegram and confirm it is you with your password or code.
2. Click Open Telegram (on a computer you can also scan the code on the page with your phone). In Telegram, tap Start, then tap Connect.
3. When the page shows Connected, you are done, and a reminder email goes to your account's address. If you don't confirm in time, the page says No confirmation arrived. Please try again.

Once connected, you can switch the Message language (any of the website's languages — it starts in the one you were using when you connected) in the same place, or click Disconnect. The connected Telegram is also listed under Account settings → Security, where you can disconnect it too.

Strategies and code

• You own the intellectual property of your strategies.
• Strategy code in the workbench is stored in isolation. Listing review, the contest and funding reviews see metrics and the materials they need, not source code.
• For self-hosted strategies, the code and servers stay with you. The platform reads account data only through a read-only API and never touches your code.

Exchange keys

API keys you submit to connect a self-hosted strategy or to enter the institution group of a contest:

• Must be read-only. Keys with trading, withdrawal, or transfer permissions are rejected, and the platform does not store them.
• Are stored encrypted. No one can see them in plain text, and they are never written to logs.
• Are re-checked before every read. If a key's permissions have been widened, reading stops immediately.
• Can be unlinked at any time. When you unlink a key, its encrypted copy is destroyed. Keys used for a contest are deleted automatically after the contest ends.

What is shown publicly

De-identify your public listing description yourself. Do not include anything that could identify you.

Eligibility documents and identity data

• Documents uploaded when you register for a contest are used only to check contest eligibility and are never made public.
• Identity verification is done on the page by a third-party verification service and is used for compliance review for prize claims and funding.

Why it works this way

The platform needs to prove that performance is real, but it does not need to, and should not, take control of a PM's strategy or funds. So the platform reads performance directly from the exchange and shows only codenames and metrics publicly. Sensitive information that needs checking (individual trades, real identity) is used only during review and never appears on a public page. De-identification is done on the server, so pages never receive raw data.

Data requests

To access or delete your personal data, Contact support and choose the "Privacy and data" topic. We usually reply within 30 days.