Security
Security at CollegeBugs
An overview of the controls, practices and protections in place across the platform.
Security practices
Row-level security on every database table, server-side role checks for admin actions, and per-user data isolation across the app.
Data protection
Service credentials stay on the server. The browser only receives publishable keys scoped to your session.
Encryption
All traffic is served over HTTPS. Data at rest is encrypted by our managed database and storage providers.
Account safety
Sign in via email/password or Google. Sessions are managed by our auth provider with refresh-token rotation.
Report a vulnerability to codenest9861@gmail.com.