How Augis protects your account and your analyses.

1Our approach

We keep as little personal data as we can, protect what we keep, and give you control over your own history. This page describes the measures in place today. It is a description of practice, not a guarantee that no incident can occur.

2Incognito mode

Every analysis has an incognito option. When it is on, the analysis is never written to your history, so there is nothing to review, export or delete later. It uses the same credit as a normal analysis and otherwise behaves the same.

3History retention

Unless you use incognito mode, your analysis history is kept for a period set by your plan and then deleted automatically.

You can delete individual analyses, or your entire history, at any time.

4Account security

• Passwords are hashed with scrypt and a unique salt per account. We never store or see your plaintext password.
• Session cookies are HttpOnly, Secure and SameSite: page scripts cannot read them and they only travel over HTTPS.
• Sign-in, registration, password changes and other sensitive actions are rate-limited to slow automated abuse.
• Changing your password signs out your other active sessions immediately.

5Transport and infrastructure

The site is served over HTTPS, with HSTS enabled so browsers do not fall back to an unencrypted connection. Server files that must not be public, such as source code, configuration and dependencies, are blocked from direct access.

6Payments

Augis accepts cryptocurrency only, through a third-party payment processor. We never see or store card details, seed phrases or private keys. Payment confirmations are verified by cryptographic signature before credits are added, and each order can be fulfilled only once.

7Data minimization

We run no advertising trackers, we do not sell account data, and we use no third-party analytics. The breach index comes from an external aggregator (see Breach data); your own activity is handled as described in the Privacy Policy.

8Reporting a vulnerability

If you find a security issue, report it through contact@augis.eu with enough detail to reproduce it. Please act in good faith:

• do not access, change or delete data that belongs to other users;
• do not degrade the service or run denial-of-service tests;
• give us a reasonable time to fix the issue before you disclose it.

We will acknowledge valid reports and keep you informed as we work on a fix.

9If something goes wrong

If we confirm an incident that affects personal data, we will act to contain it, notify affected users, and inform the relevant authorities where the law requires it, without undue delay.