Security

How We Protect Your Data

Your wedding data is important and personal. We take security seriously and implement multiple layers of protection.

Encryption

In Transit

All data is encrypted using TLS/SSL (HTTPS) during transmission between your browser and our servers.

At Rest

Your database is hosted on Neon PostgreSQL with encrypted storage.

Passwords

Passwords are hashed using bcryptjs with salt rounds, making them impossible to reverse-engineer.

Authentication

  • Google OAuth 2.0 for secure sign-in
  • JWT (JSON Web Tokens) for session management
  • Secure HTTP-only cookies for session storage

Infrastructure

  • Hosted on Vercel with enterprise-grade security
  • Database hosted on Neon with automatic backups
  • Environment variables encrypted at rest
  • Regular security audits and dependency updates

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly by emailing theshaadisheet@gmail.com. We will respond within 48 hours and work with you to resolve the issue.