Security & Trust Center

Account Security

• Password hashing: Passwords are stored as secure hashes, never plaintext.
• Email verification: Password login requires verified email ownership.
• Magic links: Sign-in links reduce password reuse risk and support account recovery.
• Google sign-in: Optional OAuth login is available for supported accounts.
• Bot protection: CAPTCHA checks are applied on registration and login-link requests.

Data Controls

• Export your data: Download a JSON export anytime from account settings.
• Delete your account: Permanently delete your account and related data from account settings.
• No ad tracking cookies: We do not use third-party advertising trackers.

Transparency

• Privacy Policy
• Terms of Service
• List of Subprocessors
• Data Transfer Terms

Report a Security Issue

Report vulnerabilities or security concerns to security@nomadti.me.