General · Contact & security
How does BurnTest keep my data secure?
Passwords are stored only as salted hashes, Stripe handles payments so no card numbers touch our servers, recordings are shown only to their owner, and reviewers are bound by confidentiality.
- Sign-in — Google, or email with a password or a one-time sign-in link. Passwords are stored only as salted scrypt hashes; sign-in links and codes expire after 30 minutes and work once.
- Payments — Stripe Checkout. Card details are entered on Stripe and never reach our servers.
- Recordings — visible only to the owner's account (and BurnTest staff for support and quality). They're never used publicly without written permission.
- Reviewers — see your URL, brief and first name only, and agree to confidentiality on every burn.
- Provenance — we record where sign-ups and submissions come from (IP, browser) to keep bots out of the panel.
Reporting a security issue
If you find a vulnerability, open a ticket and mark it as a security report. Please don't test against other people's burns or accounts.
Was this helpful?
Still have a question about this? Contact support and we'll answer within one business day.