Security

The security measures UITruth has in place today, stated plainly and factually.

Where your data is stored

Account information, input data and measurement results are stored with Supabase in Japan (Tokyo region).

Encryption in transit

All communication with the service is encrypted with TLS. HTTPS enforcement (HSTS) is applied at the hosting edge (Vercel).

Payment data

Credit card numbers and other payment details are collected and held only by our payment processor, Stripe. We never hold card numbers ourselves.

Security headers

Every page is served with a Content-Security-Policy (CSP) plus X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy headers.

How measurement inputs are treated

We never use the questions or brand names you enter for measurement to train our own AI.

Processors we disclose

The service relies on DataForSEO for measurement, Stripe for payments, Supabase for database and authentication, and Vercel for hosting. Details of each processor's handling are in our privacy policy.

Read the privacy policy

Reporting a vulnerability

If you discover a vulnerability in the service, please let us know via the contact page. We review every report and respond in turn.

Go to the contact page

Security — UITruth