Platform security

1. How we protect your data

We apply specific technical and organisational measures:

• TLS encryption on all traffic between your browser and our servers, reinforced with HSTS to prevent insecure connections.
• Authentication managed by Supabase, with hashed passwords and signed sessions that expire.
• Database permissions that limit access to your rows: each user can only read and write their own data.
• Separation between public content and private areas: dashboards, profiles and account listings are never served from a shared cache.
• Rate limits on the most sensitive entry points to prevent mass registration, publishing or payment attempts.
• Automated traffic detection with Vercel BotID and reCAPTCHA on critical forms and endpoints.
• Input validation and Content Security Policy (CSP) with incident monitoring.
• Payments handled by Stripe: your card details never reach our servers and we do not store them.

2. Responsibilities

Security is a process, not a state. No platform can promise it will never have an incident. Our commitment is more modest and verifiable: to maintain these measures, detect and fix the problems we find, tell you if an incident affects your data, and help you protect your account.

3. What you can do

Good habits that noticeably reduce the risk:

• Use a long password that you do not use anywhere else.
• Sign out when you use the service on a shared device.
• Do not publish personal data you do not need to share: avoid documents, registration numbers or third-party data.
• Be wary of messages asking for payments or details outside the platform.
• Tell us about misleading listings: moderating them protects us too.

4. Reporting a security problem

If you believe you have found a vulnerability, write to wildfoxsuport@gmail.com with a clear description, the steps to reproduce it and the impact you think it has. We will confirm receipt and let you know when it is fixed.

Please do not publish the details or try to access other users' data while we fix it. Good-faith research is not punished: we prefer a responsible report to an exploit in production.

5. Security incidents

If a security incident affects your data, we will tell you as soon as possible, explaining what happened, which data is affected and what you should do. Where the law requires it, we will notify the competent authority within the statutory deadline.

6. Contact

For anything related to platform security you can write to wildfoxsuport@gmail.com. For privacy questions, to wildfoxsuport@gmail.com.