Security Standards
How we encrypt logs, manage API tokens, secure cookie access, and prevent malicious SMS injection.
Transport Layer Encryption
All requests to our website and GraphQL API are encrypted in transit using TLS 1.3. We implement strict HTTP Strict Transport Security (HSTS) headers.
Secure Cookie Audits
Auth tokens are stored strictly in HTTP-Only, Secure cookies with SameSite=Lax flags to mitigate Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).