Payments
Card payments are processed by a PCI-compliant payment provider. We do not store full card numbers on our servers; we may retain non-sensitive details (such as brand and last four digits) to help you recognize saved payment methods.
Accounts & sessions
Access to your account is protected by your password. Use a unique passphrase, enable device security, and sign out on shared computers. Password reset flows are delivered only to the email on your account.
Infrastructure
The service runs on managed infrastructure with network controls and encrypted transport where appropriate. We patch dependencies and monitor for abuse, but no system is perfect—if you notice something unusual, tell us right away.
Reporting issues
If you believe you have found a security vulnerability, contact us through contact with enough detail to reproduce the issue. Please do not perform disruptive testing against production without permission.