Security
We take the safety of accounts and data seriously. This page summarises our approach in plain terms.
What we do
- Passwords are never stored in plain text.
- API keys are shown once when created. Keep them on your server.
- Sign-in sessions can be reviewed and ended from your account.
- Staff access is restricted and needs extra verification.
- We keep personal details only as long as we need them.
Reporting a vulnerability
Email hello@anti-spam.store with steps to reproduce. Please give us reasonable time to fix the issue before sharing it publicly, and do not access other people's data. Machine-readable details are in security.txt.