Security

The product runs over HTTPS. Staff tools use a separate sign-in from shop-owner accounts. Passwords are stored as a salted hash. API keys are not committed to the app repository.

Product logs may include a check id or place id. They do not include API keys or raw vendor payloads.

If you found a security issue, email [email protected]. Please do not send shop-owner passwords.