Security
Last updated 2026-06-07
Security isn’t a feature bolted on — it’s the reason Widgets for Kraken is read-only and on-device.
Read-only by design
We request read-only OAuth scopes. The app physically cannot trade, deposit or withdraw.
On-device storage
Your data lives on your device, not our servers. There’s no central database to breach.
Apple iCloud sync
Cross-device sync rides on Apple’s end-to-end iCloud. We never hold the keys.
How the Kraken connection works
You authenticate directly with Kraken via OAuth. The app receives a read-only token scoped to viewing your data. You can revoke it from your Kraken account at any time.
What we never do
We never request trade, deposit or withdrawal permissions.
We never store your portfolio on our servers.
We never sell or share your data.
Reporting an issue
Found a vulnerability? We’d like to hear from you. Email hello@kraken-widgets.com and we’ll respond promptly.