Loading...
Loading...
We take security seriously. Learn about our practices, report vulnerabilities, and help us keep everyone safe.
Our Approach
Security and privacy are at the core of everything we build
All data transmitted to and from our services uses industry-standard TLS 1.3 encryption.
We implement comprehensive security headers including CSP, HSTS, and X-Frame-Options to protect against common attacks.
We collect minimal data and never share it with third parties. No tracking, no ads, no data selling.
Our codebase undergoes regular security reviews. Product code will be audited before Q4 2025 release.
We appreciate the security research community and believe in responsible disclosure. If you discover a security vulnerability in our systems, please report it to us following these guidelines:
Data Protection
We collect only the essential data needed to provide our services. No tracking cookies, no analytics beyond privacy-friendly Plausible, no third-party marketing tools.
User data is encrypted at rest and in transit. We use industry-standard practices for secure data storage and never store sensitive information unnecessarily.
We carefully vet all third-party services. Currently, we only use:
You have the right to access, correct, or delete your data at any time. Contact us at privacy@privacygecko.com for data requests.
Roadmap
Open-sourced website code, implemented security headers, GDPR-compliant cookie consent
Comprehensive security audit before product releases, open-source product code, penetration testing completion
Annual security audits, bug bounty program launch, SOC 2 Type II certification pursuit
We would like to thank the following researchers for responsibly disclosing security vulnerabilities and helping us improve Privacy Gecko:
No vulnerabilities have been reported yet. Be the first to help us make Privacy Gecko more secure!
We're here to help. Contact our security team or learn more about our privacy practices.