Our security architecture mitigates identity vectors through memory-hard password hashing, isolated session storage, and short-lived verification tokens.
Argon2id Password Hashing
HttpOnly & SameSite Isolation
TOTP & Ephemeral Tokens
Passwords are salted and hashed using Argon2id with memory-hard parameters prior to storage. Plaintext credentials never touch client logs or JavaScript execution threads.
Session tokens are restricted to HttpOnly, Secure, SameSite cookie headers. Browser scripts cannot read or export raw session keys, eliminating script injection risks.
Multi-factor authentication leverages standard TOTP protocols. Account verification and password recovery links rely on single-use cryptographic hashes with automatic expiry.
Telemetry without monetization—your account activity logs belong exclusively to you.
We build security monitoring to protect digital identity, not profile user behavior. Audit records are encrypted at rest and never shared with external aggregators.
Need security disclosure details?
Our security desk receives PGP-encrypted vulnerability reports and provides technical audit documentation upon request.