Privacy

Privacy is important – let's be transparent about it.

1. There are no analytics on the website.
2. All server requests are internally logged, secrets are redacted.
3. The server is hosted on Fly.io – it tracks the location of the requests.
4. Sessions are stored as cookies that are http-only, secure, and use HMAC.
5. Every asset you upload is visible to the moderation team who must approve the asset before it is visible across the website.
6. Every uploaded asset goes through an AI model to generate captions. (working on it)
7. Passwords are stored as Argon2 – the winner of the Password Hashing Competition.
8. Assets are stored in Backblaze.
9. Secret cards are not truly secret – anyone with a Backblaze URL to the image can view it.
10. The database is using PostgreSQL and Valkey which is hosted on Aiven.
11. Searches are recorded to improve the recommendations in the magic tab. (working on it)

If you have any questions, please contact us at team@thematics.io.