Security
Last updated October 2026Your data in transit
Every connection to PrepShield uses HTTPS (TLS). Session cookies are HTTP-only and secure, so page scripts can't read them.
Your data at rest
Account data lives in a managed PostgreSQL database with encryption at rest and daily backups. Production access is limited to the people who run the service.
Passwords
Passwords are hashed with bcrypt and never stored or emailed in plain text. Reset links are single-use and expire after 2 hours.
Payments
Card details go straight to Stripe, a PCI DSS Level 1 provider. PrepShield never sees or stores your card number.
Your team
Each teammate signs in with their own account, and the owner can remove access at any time.
Reporting a problem
If you think you've found a security issue, email storefrontstudio.co@outlook.com and we'll respond within one business day.