How we protect your account, your data and your trust.
Security isn't a feature we bolt on — it's part of how WPoster is built, from how you sign in to how your data is stored. Here's an honest look at what protects your account today.
WPoster uses Supabase's authentication system, with a minimum 8-character password requirement.
Sign-in, registration and password reset are protected by Cloudflare Turnstile to block automated abuse.
New accounts must confirm their email address before they can sign in.
Deleting your account requires typed confirmation, and is blocked if it would silently remove a shared workspace's data.
Your data is isolated with PostgreSQL Row Level Security, enforced by the database itself — not just by application code.
Connected-account tokens and API keys you add to WPoster are encrypted at rest with AES-256-GCM before they're stored.
All traffic between your browser and WPoster is encrypted in transit, provided by our hosting infrastructure.
Administrative access to WPoster's internal tools is limited to a small, explicitly authorized list, and sensitive actions are recorded in an internal audit log.
Payments are handled by our payment provider — WPoster's own servers never process or store your card details.
WPoster runs on Vercel's global infrastructure, built for fast, reliable delivery.
Our database runs on Supabase's managed PostgreSQL infrastructure, including backups and recovery.
Hosting and database infrastructure scale automatically to handle growth, without manual intervention.
We use your data only to provide and improve WPoster — how we collect, use and protect it is explained in full in our Privacy Policy.
If you delete your account, your data is removed from our database — see the Account protection section above.
Security isn't a one-time project — it evolves alongside WPoster. As the product grows, we continue reviewing and strengthening how we protect your account and data.
No system can guarantee complete protection against every risk. If you ever have a security concern, we want to hear about it — reach out through our Contact page.