While sensitive data is usually stored with partners (like PayPal or Stripe), in the few instances where we store sensitive user data everything is encrypted using OpenSSL’s implementation of PBKDF2, a high-level algorithm that is designed to be intentionally slow to prevent brute-force hacking attempts.  PBKDF2 is a function currently used by apps such as 1Password, LastPass and Apple’s iOS operating system.  

Along with database and app-level encryption, our website uses SSL to prevent packet sniffing of user data over the internet.