How we keep your data safe
A short list of what is true today. Anything we cannot show you proof of is not on this page.
- Hosted in the EU
- HTTPS everywhere
- Daily database backups
How the service is run
Six things we do today.
Hosting in the EU
The API and the database run in Frankfurt. The sub-processors we use and the region of each one are listed in the Privacy Policy.
HTTPS only
The website, the dashboard and the API are served over HTTPS, and the HSTS header reminds browsers to keep it that way.
Hashed passwords
Passwords are stored as bcrypt hashes, never as plain text.
Daily database backups
The production database is backed up every day. One copy is encrypted and kept with a second provider, in the EU.
Request limits
Sign-in, checks and the public endpoints have request limits, so one client cannot flood the service.
Team roles
Team members are viewers, editors or admins. Deleting a project, for example, needs the admin role.
Your data
What happens to the data of your websites, and how to get it out.
Read the Data Processing AgreementDelete a project
Deleting a project in the dashboard deletes its events, consent records, visitors and checks.
Automatic clean-up
Every day, history older than your plan allows is deleted: 30 days on Free, 365 on Starter and 730 on Business. Consent records are kept longer, for three years, because they are the proof that a visitor agreed.
Export
A check result opens as a printable page you can save as PDF. Exporting your data as CSV is included on Starter and above.
Found a vulnerability?
Write to support@conseto.io with what you found and how to reproduce it, and we will look at it. Please do not access the data of other customers, and keep the details to yourself until we have fixed the problem.
The same contact is published in security.txt. Open security.txt
Questions about security?
Write to us. We answer what we can show, and say plainly what we cannot.