Security at ClipSocial

How we protect your account and your channels during the preview.

Sign-in

Passwords are hashed, sessions use secure, HTTP-only cookies, and two-factor sign-in (authenticator app) is available.

Platform access

You sign in on each platform's own page; ClipSocial never sees your platform passwords. You can revoke access on the platform at any time. Access and refresh tokens are encrypted at rest with per-record keys. The preview stores only placeholder or demo tokens from a local test sign-in.

Web protections

Strict Content Security Policy, CSRF protection on every change, rate limiting, and no third-party scripts on our pages.

Least data

Metrics come from official APIs only. We don't scrape, and we don't sell data.

Your control

Export your data or delete your account from account settings.

Report a vulnerability

Please report security issues through the contact form with the topic "Bug" and the word "Security" in your message. A dedicated security address will be published at launch.

Independent audits and certifications: none yet. We won't claim any until they exist.