Security Architecture
Data Protection & Infrastructure Security
Your collection records, financial basis, and deck lists represent valuable personal assets. DECK / divider is engineered with defense-in-depth security principles to safeguard your privacy and portfolio integrity.
Security Controls
- In-Transit Encryption: Enforced TLS 1.3 cryptographic transport across all client-server communications with HSTS preloading.
- At-Rest Encryption: Database records encrypted at rest using AES-256 via enterprise Google Cloud infrastructure.
- Zero Payment Storage: All subscription billing handled off-site by PayPal PCI-DSS compliant gateways. We never store credit cards.
- Responsible Disclosure: Security researchers can report findings directly to deckdivider@outlook.com.