Security Practices

• Password hashing and account lockout patterns for repeated failed logins.
• Audit logging, monitoring, and abuse prevention controls.
• Session integrity checks for test recovery and autosave operations.
• Access controls and least-privilege practices for internal systems.

• Use a strong password and don’t reuse passwords across services.
• Don’t share your account or OTPs.
• Log out on shared devices.
• Report suspicious activity promptly.

If you discover a vulnerability, please email us with details and steps to reproduce. Please do not publicly disclose issues before we’ve had a chance to investigate.

• Don’t access other users’ data.
• Don’t disrupt the Services (e.g., DoS) during testing.
• Provide enough detail for us to reproduce and fix the issue.