While sensitive data is typically stored with partners like PayPal or Stripe, in the rare instances when we do store sensitive user data, everything is encrypted using OpenSSL’s implementation of PBKDF2.
​
PBKDF2 is a high-level algorithm designed to be intentionally slow to prevent brute-force hacking attempts. It is currently used by applications such as 1Password, LastPass, and Apple’s iOS operating system.
​
Along with database and app-level encryption, our website uses SSL to prevent packet sniffing of user data over the internet.