Skip to main content
Sender

Security Practices

Our Commitment to Security

At Sender, security and privacy are fundamental to everything we do. We employ industry-leading practices to protect your data and ensure a safe platform for all users.

🔐 Data Protection

Encryption

  • In Transit: All data transmitted between your device and our servers uses TLS 1.3 encryption
  • At Rest: Sensitive data is encrypted in our database using AES-256 encryption
  • Messages: Private messages are encrypted to protect your conversations

Password Security

  • Passwords are hashed using bcrypt with a high cost factor
  • We never store passwords in plain text
  • Password requirements enforce strong credentials (8+ characters, mixed case, numbers, special characters)

🛡️ Application Security

  • CSRF Protection: Protection against Cross-Site Request Forgery attacks
  • XSS Prevention: Input sanitization to prevent Cross-Site Scripting
  • SQL Injection Prevention: Parameterized queries and ORM usage
  • Rate Limiting: Protection against brute force and DDoS attacks
  • Security Headers: Comprehensive HTTP security headers (CSP, HSTS, X-Frame-Options, etc.)

👁️ Privacy Controls

  • Profile visibility settings
  • Granular consent management
  • Audit logs for data access
  • Data export capabilities
  • Complete account deletion with data purge

🔍 Monitoring and Response

  • 24/7 security monitoring and logging
  • Regular security audits and penetration testing
  • Incident response plan and procedures
  • Automated vulnerability scanning
  • Dependency updates and patch management

✅ Compliance

  • GDPR compliance for European users
  • CCPA compliance for California residents
  • Regular privacy impact assessments
  • Data processing agreements with service providers

🚨 Reporting Security Issues

If you discover a security vulnerability, please report it responsibly to: security@sender.app

We appreciate security researchers and will acknowledge all valid reports. Please do not publicly disclose issues until we have had time to address them.

📱 User Safety Tips

  • Never share your password with anyone
  • Use a unique, strong password for your Sender account
  • Be cautious of phishing attempts
  • Verify legitimacy before making donations
  • Report suspicious behavior or profiles
  • Enable two-factor authentication when available

Last updated: December 22, 2024