Security

What we do

• Your account, charts and photos are stored in the EU, in Frankfurt (Germany).
• Every connection is encrypted (HTTPS), and our database provider encrypts the data on its disks.
• Every database table has access rules, so one account cannot read another account's charts. Share settings, password hashes and billing records can only be read by our server.
• Photos are stored in a private area and shown only through links that stop working after one hour. They are made smaller in your browser before upload, which also removes hidden metadata such as the location a photo was taken.
• Share-link passwords are stored only as scrypt hashes. Each address gets at most 5 password attempts per link in 10 minutes, and each link accepts at most 50 attempts in 15 minutes from all addresses together.
• Other websites cannot show our pages inside theirs, except charts you choose to embed.
• No third-party scripts or trackers run on our pages.
• Excel and CSV imports and all exports are processed in your browser, so the files themselves never reach our servers.
• Edits are backed up in your browser until our server confirms the save, and two saves never silently overwrite each other.

What we do not do (yet)

• Charts are not end-to-end encrypted. We and our hosting providers can technically access stored data; we only do so to run the service or when you ask for help.
• Anyone who has an open share link can see everything the cards show (fields you hide are never sent). Use a password and an expiry date for sensitive charts, or don't share them.
• Not available yet: two-step sign-in, single sign-on (SSO), an independent security test or certification of mivochart itself.

Backups

We keep no database backups, so deleted data does not stay behind in backups. This also means we cannot restore a deleted chart for you, so keep your own copies of important charts with the account export.

Report a security problem

If you think you have found a vulnerability, please write to hello@mivochart.com. Please give us reasonable time to fix it before you tell others. If a breach affects your data, we tell you without undue delay.