Security

Access

Passwords are hashed. Session cookies are httpOnly. Admin actions, including plan edits and sign-in as another user, are limited to admin accounts and written to an audit record.

Billing amounts are read from the plan record on the server. A browser cannot submit a custom price.

Search

Campaigns, the inbox, billing, support, and the admin tools are not part of the public sitemap. Private routes send a noindex directive. Do not put secrets in a campaign body you would not want a recipient to see. Recipients receive the mail you send them.