Security Overview

We ensure that all data transmitted between your browser and our servers is encrypted using modern TLS (Transport Layer Security). Additionally:

• Passwords: Stored using robust one-way hashing algorithms (e.g., bcrypt). We never store your passwords in plain text.
• Database: Sensitive data at rest is protected through encrypted storage volumes on our cloud infrastructure.

Our authentication system is designed to prevent unauthorized access:

• JWT Sessions: We utilize secure, short-lived JSON Web Tokens (JWT) stored in HTTP-only cookies to manage user sessions safely.
• Rate Limiting: Endpoints are protected by rate limiting to prevent brute-force attacks on login and registration pages.

We host our services on reputable cloud providers (like DigitalOcean and AWS) that comply with strict international security standards. Our infrastructure includes:

• Isolated virtual private clouds (VPCs) for database instances.
• Strict firewall rules that block unauthorized external traffic.
• Regular security patches and automated backups to prevent data loss.

We actively monitor our platform for unusual activity. If you believe you have found a security vulnerability in our system, please contact our security team immediately through our Contact page. We take all reports seriously and will investigate promptly.