Trust and security

How we protect your account

• All traffic is encrypted in transit with HTTPS.
• Sign-in is handled by a dedicated identity provider; we never store your password.
• Access to your data is checked on the server for every request.
• You can download or delete your data from your account settings.

Report a vulnerability

If you believe you have found a security issue, please email [email protected] with steps to reproduce. Please do not access other people's data or disrupt the service while testing.