Security
How we protect your account and credits
These are the protections that are in place today. We will update this page as they change.
Your password
Passwords are hashed with scrypt and a unique salt. Draychain staff cannot read them.
Your email
Verification and reset links are single use and expire. Requesting a new link makes earlier ones stop working.
Your sessions
Sessions are stored on the server, last 14 days, and are cleared when you sign out. A password change signs out other devices.
Your payments
Card details are entered only on the provider's page. Credits are added only after the provider confirms the payment.
Your balance
Every change is a ledger entry. Entries are never edited, and corrections are recorded as new entries.
Checks in place
- • Passwords are stored as salted hashes, never in plain text.
- • Email verification and password reset use single-use links that expire.
- • Simple pricing: $1 = 1 credit.
- • Credits are added only after the payment provider confirms the payment.
- • Every change to your balance appears in your credit history with a date and description.
- • Your balance can never go below zero.
- • Repeated sign-in attempts are rate limited to slow down guessing.
If you think your account has been accessed without permission, contact support and change your password.