Account & sign-in

Privacy & security

We take the security of your account seriously. Here's a quick overview of how we protect it and what data we keep.

How we protect your account

  • Your password is never stored in a readable form, and we never show it back to you.
  • Sign-in and password-reset requests are rate-limited to guard against automated attacks.
  • Your session is kept in secure, browser-only cookies — they can't be read by scripts on the page.
  • Confirmation and reset links are single-use and expire, so an old link can't be reused.
  • All traffic is served over HTTPS.

What account data we keep

We keep only what's needed to run your account: your email address, your name (if you provided one), and a record of when you accepted our Terms and Privacy Policy. We don't keep a log of your individual sign-in locations.

Unconfirmed accounts are cleaned up

If an account is created but the email is never confirmed, it's automatically deleted after 7 days.

For the full details on how your data is handled and the terms of using Adfit, see the Terms of Service and the Privacy Policy. You agreed to both when you created your account.