Security Statement

This document is with Mar8's lawyer and is not yet published. Nothing on this page is legal text, and nothing here should be relied on.

The finished security statement will replace this page before Mar8 opens to the public. It will cover:

• encrypted connections everywhere, and where your information is stored (Sydney, Australia)
• who at Mar8 can read a profile, and how they sign in
• how sign-in works: your email and the password you choose, stored only in scrambled (hashed) form — an emailed link only ever confirms your address or lets you set your password
• backup and retention
• how to report a vulnerability, and what response to expect
• an honest statement of what is not claimed — no external audit, penetration test or certification