TrafTRAFTRUTH
Safety & Security
How TrafTruth protects accounts, report requests and subscription access, and how to report a concern.
Revision date:
support@traftruth.comSecurity approach
TrafTruth applies data minimization, access controls and layered request protections appropriate to a website-research service. No online service can promise absolute security, so these controls are reviewed as the product and its infrastructure evolve.
Accounts and sessions
Email verification codes expire after ten minutes. Account session credentials are generated with cryptographically secure randomness, stored on the server as hashes and expire after thirty days. Authentication endpoints are rate limited. Never share verification codes or session credentials with anyone.
Report and infrastructure safeguards
Report requests are normalized and validated before provider access. The service limits request rates, blocks unsafe private-network targets for page inspection, keeps provider credentials on the server and uses short-lived caches to reduce unnecessary upstream access. Production traffic should be sent over HTTPS.
Payments and entitlements
Apple and Google process payments; TrafTruth does not receive full payment-card details. RevenueCat verifies subscription entitlements. Store webhook requests must pass signature validation before they can affect usage state.
Responsible disclosure
If you believe you found a security vulnerability, email support@traftruth.com with the affected URL or component, reproduction steps and potential impact. Do not access data that is not yours, disrupt the service, use automated high-volume testing or publicly disclose an unresolved issue. We will acknowledge and investigate good-faith reports.
Protecting yourself
Install TrafTruth only from official listings, keep your device and browser updated, review links before sharing and do not submit credentials, private URLs or sensitive personal information as research targets. Contact us promptly if you suspect unauthorized account access.
Useful links
Human Continuum Inc · Delaware, United States