Security and Data Protection

Protecting your data and payments is part of how we build. Here is what we do, in plain language.

Protecting payments

• Payments are handled by PayPal; we never receive card or bank details.
• Every payment is verified on our server with PayPal (amount, currency and order) before an order is marked paid.
• Downloads are released only for orders confirmed as paid.

Protecting data

• The whole site uses HTTPS (encrypted in transit).
• The database and private files are kept outside the public web folder and are blocked from direct access.
• The administrator code is stored as a salted hash, sessions are protected and limited in time, and sign-in attempts are rate limited.
• Forms use spam protection (hidden trap field and rate limits).
• Uploaded files are restricted to images and video, and no uploaded file can run as code.
• Anonymous analytics store no names, emails or IP addresses. Old statistics are deleted automatically.
• We collect only what we need and delete data we no longer need.

Browser protections

The site sends security headers (content type protection, referrer control, frame protection and a permissions policy) so browsers add another layer of safety.

Your part

Use a strong, unique password for PayPal and your email, check that the address bar shows paypal.com when you pay, and keep your device updated.

Report a problem

If you find a security issue, please email hello@jiisaaduddin.com with details. Do not publicly disclose it before we have had a reasonable chance to fix it. We appreciate responsible reports and will reply within 2 business days.