Security

How we protect your information

• Every page is served over HTTPS.
• Forms are checked on the server and protected against spam and abuse.
• Passwords and API keys are kept on the server, never in the browser.
• Payments are handled by Stripe.
• Staff accounts will require multi-factor sign-in.
• Backups are tested by actually restoring them.

We follow OWASP guidance for web application security. We don't hold security certifications and haven't completed an independent audit. If you find a security problem, please report it through the contact page.