Help

Security.

How we protect your account and data.

Updated 2026-10-31

Passwords are hashed with PBKDF2-SHA256 and never stored in plain text. Sessions are httpOnly cookies that expire after 30 days.

Payments

Card and bank details are handled by our licensed payment partner. We store only the last four digits.

Reporting an issue

Write to the security contact with steps to reproduce.