Security

Last updated: 27 June 2026

Here is how we protect your account and your data, in plain terms. We describe what we actually do, and nothing we do not.

• Passwordless sign-inYou sign in with a one-time code sent to your email, so there is no password to guess, reuse, or leak.
• Encryption at restPersonal data is encrypted with AES-256-GCM, and the keys are rotated.
• Encrypted transportYour connection to the service uses HTTPS, so data is encrypted while it travels.
• EU hostingThe service runs in the European Union, in Germany (Hetzner).
• No advertising or trackersWe show no ads and use no third-party tracking.
• Your data stays yoursYou can export your data and delete your account (this is being added).

Reporting a problem

If you find a security issue, please email hello@bdgtplnr.com. We take reports seriously and will respond.