Account protection
Passwords use modern hashing, sessions can be reviewed and revoked, and authenticator-based two-factor protection is mandatory for privileged accounts.
Data protection
Claim evidence stays in private, access-controlled object storage with scheduled deletion. Public maps use reduced coordinate precision. Logs use correlation identifiers and avoid unnecessary personal data.
Report a vulnerability
Email michael@fitprosearch.com with a clear description and safe reproduction steps. Michael at Fitprosearch is the initial response owner. Do not access other people’s data, disrupt the service or use automated high-volume testing without written permission.
We aim to acknowledge security reports within two working days and will coordinate updates according to severity. The supported production service is fitprosearch.com.