Security.

• Every page is served over HTTPS, so what you send us is encrypted in transit.
• Account passwords are stored only as bcrypt hashes. Nobody at Digitat can read them.
• The sign-in cookie cannot be read by scripts on the page, which limits what a malicious script could steal.
• Visitor IP addresses are stored as one-way hashes, never as the addresses themselves.
• The admin area is restricted to signed-in team members with an admin or editor role.
• Our free tools run in your browser, so what you paste into them never reaches our servers. The LinkedIn post generator is the exception; see the privacy policy.

Work is committed to your own repositories, so the code stays under your control.

We will sign a non-disclosure agreement before you share anything sensitive.

If you find a vulnerability or see something suspicious, email work@digitat.in with the details and how to reproduce it.

Please give us a reasonable chance to fix it before sharing it publicly. We will reply and keep you updated.