When does a user session typically end on the platform?

A session usually ends after a period of inactivity, manual logout, or when security rules require re-authentication. These three mechanisms work together to ensure that user sessions are managed securely and that access to the account is properly controlled throughout each interaction with the platform.

Inactivity timeout is the most common way sessions end during routine use. When the platform detects that a user has not performed any action — such as clicking, navigating, placing orders, or interacting with charts — for a defined period of time, the session is automatically terminated. This protects the account from being left open and accessible on an unattended device, which could create an opportunity for unauthorised access. The timeout period is calibrated to allow reasonable pauses during normal trading activity while still providing meaningful security protection during longer absences.

Manual log out occurs when the user actively chooses to end their session by clicking the logout button within the platform interface. This is the most secure way to conclude a trading session, as it immediately invalidates the session token and ensures that no further actions can be performed without a fresh login. Users are strongly encouraged to log out manually every time they finish using the platform — particularly when accessing their account from shared, public, or workplace devices where others may have physical access after they leave. Security-triggered re-authentication represents the third way a session may end. This can occur when the platform's security systems detect unusual activity during an active session, when a maximum absolute session duration is reached regardless of ongoing activity, or when certain sensitive account operations — such as changing a password or modifying withdrawal settings — require the user to re-verify their identity before proceeding. Each of these session-ending mechanisms contributes to a secure account environment where access is continuously validated and never left open longer than necessary.