λ μ σ
Try it now

🔐 Security at MySolvers

I take security seriously. MySolvers is designed with privacy, data protection, and infrastructure resilience at its core. This page outlines the key measures in place to safeguard your data and keep the service sound.

1. Data Minimization

MySolvers collects only the data necessary to run the service:

  • Email address and username for account creation and login
  • No passwords are stored in plain text
  • No payment data is stored—Stripe handles all billing securely

2. Authentication & Access Control

  • Passwords are hashed using industry-standard algorithms (bcrypt)
  • Session management is handled securely via HTTP-only cookies
  • Admin access is strictly limited and audited
  • Role-based access control (RBAC) is enforced where applicable

3. Encryption

  • All data in transit is encrypted using TLS 1.2+
  • Sensitive data at rest (e.g., user credentials) is encrypted or hashed
  • Stripe handles payment data with PCI-DSS Level 1 compliance

4. Infrastructure Security

  • The service is hosted on Vercel, which provides an isolated, managed runtime for each deployment
  • Dependencies are monitored and patched regularly
  • Network access is restricted via firewalls and private subnets
  • Secrets and environment variables are stored securely

5. Monitoring & Incident Response

  • Uptime, error rates and suspicious activity are monitored
  • Automated alerts flag anomalies or potential breaches
  • In case of a security incident, there is a documented response plan including user notification and remediation

6. User-Controlled Data Deletion

Users can delete their account at any time. This action:

  • Permanently removes all personal data from the database
  • Ensures no residual data remains in backups beyond retention limits

7. Third-Party Services

MySolvers relies on these third-party providers:

  • Stripe for secure payment processing
  • Vercel for application hosting and anonymized usage tracking via Vercel Web Analytics
  • All third-party services are vetted for security and compliance

8. Compliance

MySolvers aligns with key privacy and security standards:

  • GDPR: Users can access, export, or delete their data
  • PCI-DSS: Stripe handles all payment data in compliance
  • Data localization: Servers are hosted in Europe with appropriate safeguards

9. Responsible Disclosure

If you discover a vulnerability, please disclose it responsibly. Write to ppretki@mysolvers.com and I will respond promptly.