Security

Our approach

Server-side payment confirmation, idempotent event processing, least-data age assurance, secure sessions, audit records and signed release metadata form the baseline of how P.A.I.G.E. is built. Passwords are never stored by this website in plain text; production customer authentication is handled by the separate P.A.I.G.E. account service, using industry-standard password hashing. Payment card data and identity documents are never collected or stored by this website.

Traffic and bot protection

Cloudflare sits in front of this website (as a tunnel and, on forms like registration, as Cloudflare Turnstile) to protect against automated abuse. Turnstile verification happens on our server, not just in your browser.

Report a vulnerability

Raise a support ticket using the Security category from Support. Please do not include passwords, tokens or other secrets, or anyone else's personal data, in your report.