Security
Security at GetIndexRocket
We take the security of your account, submitted URLs, and billing information seriously. This page outlines how we protect your data across the platform.
Encrypted connections
All traffic served over HTTPS/TLS. Dashboard and API requests are encrypted in transit.
Secure password storage
Passwords are hashed before storage. We never store or transmit plain-text credentials.
Session-based authentication
HttpOnly session cookies protect account access. Google OAuth supported for passwordless sign-in.
Infrastructure isolation
Application and database run on isolated production infrastructure with restricted access.
Payment security
Payments are processed by Buy Me a Coffee — card details never touch our servers.
Data minimization
We collect only what is needed to run the indexing service: account info, submitted URLs, and pipeline status.
Reporting security issues
If you discover a security vulnerability, please report it responsibly to [email protected]. Do not disclose publicly until we have had a chance to investigate.