Security
How we protect our platform and the data you trust us with.
Last updated: 15 October 2026
Security is foundational to how we build and operate Eightysevenpins and our platform. This page summarises the measures we take to protect the Services and the data you trust us with.
Encryption in transit
All connections to our website and platform are encrypted using HTTPS/TLS. We enforce secure connections with HTTP Strict Transport Security (HSTS), so modern browsers only ever connect to us over an encrypted channel.
Account protection
Passwords are never stored in readable form — they are protected with strong, industry-standard one-way hashing. Accounts can enable two-factor authentication (2FA) using an authenticator app or email. Sessions time out automatically after a period of inactivity, and repeated failed sign-in attempts trigger a CAPTCHA challenge and a temporary lockout to frustrate automated guessing.
Application and browser hardening
Session cookies are marked Secure, HttpOnly and SameSite, so they cannot be read by scripts or sent from other sites. We also send modern security response headers, including a Content Security Policy and HTTP Strict Transport Security, to reduce the risk of common web attacks such as cross-site scripting and clickjacking.
Network and infrastructure
Our supporting services — databases, mapping and search — run on a private network and are not directly reachable from the internet. Public traffic is served only through a hardened web layer that sits behind a global content delivery network, which also helps absorb and filter malicious traffic before it reaches us.
Maintenance and monitoring
We keep our systems and dependencies up to date, apply security patches promptly, and monitor the Services for unusual activity.
Data handling
How we collect, use and protect personal information is described in our Privacy Policy.
Responsible disclosure
If you believe you have found a security vulnerability, we want to hear from you. Please contact us with the details. We ask that you give us a reasonable opportunity to investigate and address the issue, and that you do not access, modify or delete data that is not your own while doing so.