Your key, your orders, your funds. None of them reach us.
PolyQuad is a desktop app that trades from your own Polymarket wallet. The key stays in your computer's keychain, orders are signed on your machine and go straight to Polymarket, and the funds never leave your wallet. This page lists what that means in practice, and what we never do.
What PolyQuad never does
Hold your funds
Your money and positions stay in your own Polymarket wallet. You can see, sell and redeem them on polymarket.com at any time, with or without PolyQuad.
Receive your key
Not on our servers, not by email, not in a chat. The key is pasted once into the app on your own computer and stays there.
See your orders
Orders are signed on your computer and sent directly to Polymarket's order book. They do not pass through any PolyQuad server.
Move your money
The app's code can only redeem winnings back into your own wallet, turn on Polymarket's auto-redeem and authorise a trade-only session key. It has no transfer or withdrawal code, and a test checks that.
Message you first
We never DM first, never ask for keys, there is no token. Anyone who writes to you as PolyQuad and asks for a key, a seed phrase or a payment is not us.
Trade for you
PolyQuad is a manual trading terminal. You place every order yourself. It gives no signals and no advice.
What PolyQuad sees
Your key, your funds or your orders.
The key (in the keychain), your trade history and your settings.
Your wallet's trades on Polymarket, which anyone can read from the blockchain and Polymarket's public data.
Keys stay on your computer
The keychain. The desktop app keeps a key only in your operating system's keychain: the macOS Keychain or Windows DPAPI. On disk there is only ciphertext. Only the app's main process can decrypt it, and the app's windows only ever get addresses back, never the key.
A trade-only session key. For a Polymarket deposit wallet with auto-redeem turned on (the kind every new Polymarket account has), setup creates a new key on your computer that can place orders but cannot withdraw, valid for about 180 days. Your owner key is used once in memory to authorise it and is not saved. Other wallet types (proxy, Safe, plain) keep the owner key in the keychain instead.
The server edition runs on your own server, and its key stays in that server's configuration (a Docker secret or an environment variable).
Orders go straight to Polymarket
Every order is signed on your computer with Polymarket's own signing format and sent to Polymarket's order book over your own connection. Prices and charts come from public market data (Polymarket, Binance, Coinbase, Bitstamp, Deribit) and balances from a public Polygon node. The app may only talk to an allowed list of these addresses, and a test checks the addresses in its source code against that list.
Selling, stop loss, take profit and redemption never depend on your PolyQuad account or on our servers being up, so an expired sign-in can never leave a position without its exits.
What our servers receive
The PolyQuad account service exists for the launch offer, rebates and referrals. It receives only:
- your wallet address and a sign-in signature (Sign-In with Ethereum), then a session token
- your email address, only if you choose to add one
- referral codes
- for a share card's check link: the public transaction hashes of that trade and the result the card shows
- anonymous counts of share cards (one word, no account and no identifier)
It never receives your key, positions, orders, balances, the app version, your operating system or a device identifier. IP addresses are used only for rate limits and are not stored.
Sign-in with your wallet happens on your computer, with the same key you trade with. The app signs only PolyQuad's own sign-in message (for polyquad.app, on Polygon, stating that the signature does not trade or move funds) and refuses to sign any other text.
Builder trades are public. Orders placed through PolyQuad carry PolyQuad's builder code, and Polymarket publishes builder trades. Anyone can therefore see which wallets trade through PolyQuad, as our privacy policy explains.
The wallet tracker runs on your computer and reads Polymarket's public data over your own connection. The wallets you pin are never sent to us.
Share cards are drawn on your computer and never contain your wallet address, in the image or in its links.
Installing PolyQuad
Download PolyQuad only from polyquad.app; the download opens on launch day. We will have signed installers before launch: the macOS app signed with our Apple Developer ID and notarized by Apple, and the Windows installer signed by Drivexio OÜ. If your system warns that the publisher is unknown, do not open the file.
There is nothing to install before launch. A file, extension or "early build" offered to you anywhere else is not from us.
Scams to watch for
- Someone in your DMs or replies offering support, an early build, a giveaway or a refund. We never message first.
- Any request for your private key, seed phrase or a wallet signature outside the app's own setup and sign-in.
- A PolyQuad token, airdrop or contract address. PolyQuad has no token.
- Look-alike websites and accounts. The real ones are listed on our official links page.
- Promises of profit. PolyQuad is a tool; prediction markets are high-risk and you can lose all funds you trade.
This website
polyquad.app loads no advertising or tracking scripts. Visits are counted with cookieless analytics (Umami) that honours Do Not Track. The only cookie is a functional referral code, kept for 30 days when you arrive through a referral link. The site is served over HTTPS only (HSTS) and cannot be framed by other sites.
Report a problem
Found a security issue, or someone impersonating PolyQuad? Email hello@polyquad.app. Please do not post details of a vulnerability publicly before we have had a chance to fix it.
See also: official links · privacy policy · terms