Dieses Dokument ist nur auf Englisch verfügbar. Maßgeblich ist die englische Fassung.

Security

Last updated: 16 October 2026

How we protect your account and data:

• All traffic is encrypted (HTTPS, HSTS).
• Passwords are hashed with scrypt; we never store or see them.
• Two-factor authentication with any authenticator app, plus one-time recovery codes.
• Sessions are stored only as one-way hashes, expire after inactivity, and you can see and end every signed-in device.
• Strict content-security policy, no third-party scripts or trackers.
• Rate limits and automatic lock-outs against password guessing.
• Our public servers never hold the laboratory readings behind the prices.

Found a vulnerability? Write to [email protected] with "Security" in the subject. Please do not test against other people's accounts.