Security

We use Firebase for auth and data. All traffic is encrypted in transit (TLS). Data stored in Google Cloud is encrypted at rest.

• OAuth via Google or email/password (Firebase Auth)
• Least‑privilege service accounts on the backend
• Rate limiting and session hardening
• Data deletion on request: [email protected]

Report a security issue: [email protected] • security.txt