Security

Last updated June 29, 2026

Controls

NewsletterIdea uses passwordless customer sign-in, hashed API keys, scoped API access, parameterized SQL commands, protected tokens, webhook signature verification, rate limits, operational logging, and explicit data redaction for secrets and payment identifiers.

Report an issue

Use /contact with the Security topic. Include affected URL, reproducible steps, expected impact, and whether data was accessed. Do not include raw secrets in the first message.