Security

Last updated: July 3, 2026

Architecture: local-first, minimal surface

• The application runs entirely on your machine and makes no network connections — there is no server to breach and no account credentials to steal, because neither exists.
• It requests no elevated privileges beyond a standard user install and touches only its own application-data folders.
• Built in Rust — a memory-safe systems language — with the interface in an isolated webview.

Downloads

• The only legitimate download source is optimapoker.com. Installers obtained anywhere else should be treated as untrusted.
• During early access the installer is not yet code-signed, so Windows SmartScreen may show a notice ("Windows protected your PC" → More info → Run anyway). Code signing is planned before general availability, which removes the notice and lets you verify the publisher.

Website

• Served over HTTPS via Cloudflare's global network; static content only — no login, no database, no third-party scripts.

Reporting a vulnerability

If you believe you've found a security issue in the application or this site, please email support@optimapoker.com with details. We take reports seriously and will respond promptly. Please practice responsible disclosure — give us a reasonable window to fix an issue before publishing it.