How we protect you

• Email verification and secure password reset.
• Google sign-in available.
• An account activity log so you can spot anything unusual.

Database rules make every record readable only by its owner. Admin rights are stored separately and checked on the server, never from editable profile data.

Scores are written only by our server after a genuine YouCam response. The browser cannot create or edit a scan result.

API keys are never sent to your browser. All traffic is encrypted in transit.

Found a vulnerability? Please report it through Support and we will respond promptly.