Security at AfterAds
How we protect your account and data, and what we do and don't store.
Protecting your account
Your password
We never store your password as you typed it, only a value derived from it that the password can't be recovered from. Passwords must be at least 8 characters.
Email confirmation
A new account doesn't open until its email address is confirmed. You can also sign in with Google instead of a password.
Limited sign-in attempts
We limit sign-in attempts and check that each one comes from a person, not a bot. After 10 failed attempts within 15 minutes, sign-in to the account is paused for one hour and we email you about it.
Unusual sign-in alerts
If your account is signed into from two places too far apart to travel between in the time elapsed, we email you an alert.
Your session
Your session ends after 30 days without use. The session ID is kept in a cookie that page scripts can't read and that is only sent over an encrypted connection.
Protecting the site
Always encrypted
The site runs on HTTPS only, and we tell browsers never to open it over an unencrypted connection.
No framing
Other sites can't show our pages inside a frame, which protects the sign-in pages from clickjacking.
Secret keys
Secret keys are kept in our hosting settings, not in the source code.
Team permissions
Each member of our team gets only the permissions of their role. Sensitive actions in the admin panel are logged with their time and who performed them.
Your data
What we store
- Your name and email address.
- Your sign-in history: time, IP address, and browser and device type.
- The messages you send to support.
Where we store it
The database and the site's servers are in Frankfurt, Germany, with Supabase and Vercel. Files are stored with Cloudflare R2. These providers encrypt the data they store.
What we don't store
- Your card details: we never receive or store them.
- Your password as you typed it.
- Your personal data in technical error reports.
Payments
Our themes are bought from the Salla theme store, and Salla handles the payment.
Found a vulnerability?
Email info@afterads.com with “Security vulnerability” in the subject. Include the affected link and the steps to reproduce it. We read every report and reply to you.
Please don't publish the details before we fix the issue, and don't access or change anyone else's data.
info@afterads.comStart with the Angel theme
Buy Angel from the Salla theme store, then publish it from your store dashboard.