Security
How we look after your account and your payments.
What we do
The protections built into the site and your account.
Passwords are stored as salted hashes, never as plain text. Reset links are single use and expire.
Sessions use secure cookies the page scripts cannot read. Repeated failed sign-ins are slowed down, and two-factor sign-in is available for accounts.
Card payments go through Stripe Checkout. Your card details are entered on Stripe, not stored by us.
Actions staff take on accounts and orders are recorded in an audit log.
Included on every plan with nothing to set up.
We ask you to confirm your email address so account emails reach the right person.
Found a problem?
If you spot a security issue, tell us through the contact page and include what you saw. To report abuse from another customer, use the abuse form.