Security & data
Clear about what is here.
This is a local development foundation. It has not undergone an independent security assessment.
Implemented controls
- Password hashing with scrypt and per-password salts.
- Random, expiring sessions, stored as hashes in the database.
- Owner-scoped project access, explicit browser origins and request limits.
- Revision checks to prevent overwriting newer translation edits.
Where data lives
Accounts, projects and translations are stored in the local backend SQLite database. This build does not send strings to an AI provider, send email, or collect payments.