Trust, in plain words

Security

• 🔐 TLS 1.3 everywhere (wildcard cert renewed automatically). HTTP is redirected to HTTPS with HSTS on.
• 🔑 Passwordless login via magic email links. No password to lose, no password to steal.
• 🧾 CSRF tokens on every state-changing form. Strict Referer check on HTTPS.
• 🛡️ Content Security Policy in Talisman (strict script origins). Rate-limited login and signup via Redis.
• 🗄️ Database on 127.0.0.1 only; no public port exposed. Nightly encrypted backup to disk.
• 🕵️ Every important action lands in an audit log (visit added, reward redeemed, settings changed, ghost login).

Reliability

• ⏱️ Hosted on Hetzner (Frankfurt, EU). Public health check at /healthz.
• 💾 Nightly pg_dump backup, kept 14 days. I test the restore procedure monthly.
• 📉 If something breaks, the fix goes out the same day. I run one product, not fifty.
• 📊 Uptime target 99.5 percent (about 3.5 hours of downtime per month, worst case). No SLA credits yet - I will sign one with the first tenant who asks.

Privacy & GDPR

• 🇪🇺 All data lives in the EU (Hetzner Frankfurt datacenter). No transfer outside the EU/EEA except for email delivery (Brevo, EU-hosted).
• 🚫 No third-party analytics with cookies. No Google Analytics, no Facebook Pixel, no session replay tools.
• 📤 You can export every customer, visit and reward row as CSV from Settings any time.
• 🗑️ Client asks to be forgotten: one click in Customers deletes their row and cascades to their history.
• ⏳ Cancel your account and you get a 30-day grace window with full CSV export. After that, everything is deleted permanently.
• 📄 Full details in our Privacy Policy.

Who owns the data

You do. Your customer list is your business, not mine. I never sell it, never share it with third parties, never train ML models on it, never look at individual client records except when you ask me to help debug something. Export any time, take it anywhere.