Trust

Seven straight answers before you trust us with a trade.

Short answer first, the details under it. Last reviewed 8 October 2026 · app version 5.0.23.

01

Where is my private key?

On your own computer, encrypted. It is never sent to Uurly or to anyone else.

When you add a wallet, Uurly stores the key encrypted in the app's own data folder:

  • Mac — ~/Library/Application Support/Uurly
  • Windows — %APPDATA%\Uurly

The encryption is Fernet (AES-128 with an integrity check). The key that unlocks it sits in the same folder and only your own user account can read it. That protects against casual exposure — a shared screen, a synced folder, someone browsing your files. It does not protect against someone who already controls your computer and user account.

Trades are signed on your computer and sent straight to the blockchain. Keys are never logged and never included when you export your settings. Uurly Trial has no wallet at all.

Use a separate trading wallet with only what you're prepared to lose — never your main wallet.
02

Can Uurly manage my wallet or funds?

No. The Uurly server has no wallet and no key, so it cannot move your funds. Only the app on your computer can sign a trade.

You never deposit anything with Uurly. The server finds and measures new coins; your app judges them with your own settings and — with a Pro license — buys and sells from your wallet. In the European Economic Area every buy waits for your confirmation.

If you turn on the phone dashboard, you can ask your app from your phone to pause, resume, buy or sell. The server only passes that request on; your app carries it out on your computer. That makes your uurly.io sign-in worth protecting: turn on two-step sign-in on your account page, and never share your license key.

03

What data is stored — and what isn't?

Your keys and your settings stay on your computer. Our server keeps what it needs to sign you in and check your license — and, only if you turn on the dashboard, your live trading data while your app is online.

What
Where, and why
How long
Wallet keys, seed phrases, API keys
Only on your computer, encrypted
Never on our server
Settings, trade history, tracked wallets
On your computer
Until you delete them
Email address, sign-in codes (as a hash), sessions
Our server — signing you in
Codes: deleted within a day after they expire · sessions: 14 days · account: while it's active, then up to 12 months
License (as a hash), device fingerprint (as a hash), app version, IP address, country given at purchase
Our server — license check, one-device rule, EEA rule
While your account is active, then up to 12 months
Dashboard data: trades, positions, balances, public wallet addresses, bot status, computer name
Our server — only if you turn the dashboard on
Deleted 15 minutes after your app goes offline
Themes you own
Our server — linked to your email
While your account exists

Never stored by Uurly: private keys, seed phrases, or anything that could sign a transaction. The license check sends only your license key and a hashed device fingerprint. Full details in the Privacy Policy.

04

What happens when Uurly or an outside service goes down?

Your app keeps running on your computer, and open positions keep their stop-loss and take-profit as long as it runs. What stops first is finding new coins.

The Uurly server is downNo new coins reach your app. Your open positions are still watched and sold by your app. New real-money buys need a license confirmed in the last hour, so they pause after an hour; selling never needs the license.
The dashboard or push is downYour trading is not affected. The app's log says once that it can't reach uurly.io, and again when it's back.
A price source is downWhere it can, the app reads the price straight from the coin's pool on the chain, so stop-loss and take-profit keep working.
The blockchain or your internet is downNo trade can go through — including a stop-loss — until the connection is back.
Your computer is off, asleep or Uurly is closed: nothing watches your positions. Stop-loss and take-profit run in the app on your computer, not on our server. With the dashboard on, your phone gets a push within a few minutes when your app stops answering while positions are open.

Live status of our services: status page →

05

Which checks does Uurly run — and what are their limits?

Before every buy, the app checks the coin against your own limits and refuses it when one fails — with the reason. Checks lower the risk. They cannot rule out a rug pull.

Liquidity & poolsMinimum liquidity, whether it's locked or burned, extra or decoy pools.
Contract & authoritiesMint and freeze authority on Solana, risky Token-2022 extensions (permanent delegate, transfer hook, transfer fee); mintable, blacklist, pausable and proxy contracts on EVM chains.
Can it be sold?A honeypot check, a buy-and-sell simulation with the real buy and sell tax, and — where you turn it on — a small test buy and sell.
Holders & creatorTop-holder share, wallets that look linked (clusters, bundles), the creator's share and history.
Market behaviourChart shape, buy/sell pressure and trading activity in the first minutes.
Two scoresA Security score and an Opportunity score, each with your own minimum.

The limits, honestly:

  • A new coin can change within seconds of a check. A creator can still pull liquidity or sell after you bought.
  • Checks read data at one moment; a source can be late or wrong, and some tricks are new.
  • You set the thresholds. Looser settings let more risk through.
  • A high Security score is not a guarantee, and no check makes a coin "safe". Memecoins are extremely risky. Not financial advice.
06

How do I report a security problem?

Tell us privately — send a direct message to a Uurly team member on Discord. Please don't post it in public.

Useful to include: what you found, the steps to reproduce it, your app version and your operating system. Never send us your private key or seed phrase — we don't need them, ever.

  • We tell you what we'll do, and when a fix ships it's listed in the changelog.
  • Please test only against your own account and don't access other people's data.
07

How do I recognise official downloads, accounts and support?

Download Uurly only from your account page on uurly.io. The Uurly team never DMs you first and never asks for your private key, seed phrase or license key.

Our official channels:

Anyone who does any of these is not us:

Sends you a download link in a DM or by email attachment
Asks for your private key, seed phrase, license key or sign-in code
Offers "support" in a DM you didn't ask for, or a "wallet sync" or "validation" site
Asks you to send crypto to fix, unlock or verify something

The app itself only updates from uurly.io and checks every update's fingerprint before installing it. Uurly is not yet signed by Apple and Microsoft, so your computer warns you the first time you open it.

Verify your download

Check that the file is exactly the one we published.

Every installer has a SHA-256 fingerprint. Your account page shows the fingerprint of each download; if yours matches, nothing changed on the way.

1 · DownloadFrom your account page on uurly.io — nowhere else.
2 · Make the fingerprintMac, in Terminal:shasum -a 256 ~/Downloads/Uurly-5.0.23-arm64.dmgWindows, in PowerShell:Get-FileHash $env:USERPROFILE\Downloads\<the file you downloaded>
3 · CompareIt must match the fingerprint on your account page character for character. If it doesn't, don't open the file — tell us.

Fingerprints are shown on your account page once you're signed in. The in-app updater does this check for you automatically.