Security
How DriftLess protects your account and site data
Keys, sessions, data handling, and platform safety in plain language.
- Your site and account data are private to your account.
- We protect files and version history with access checks.
- Buyer contact and delivery details are encrypted and visible only to the seller account owner.
- Card and bank details are handled by Inflow and are never stored by DriftLess.
- Session-based login with time-limited cookies.
- Optional Google and GitHub sign-in.
- Passwords are hashed, never stored as plain text.
- We do not sell your data.
- We do not expose API keys.
- We do not bill model usage through hidden markups.
- We do not let generated website code calculate prices or mark an order paid.
- Most makers never need to add provider keys.
- Advanced teams can add their own provider keys.
- Keys are encrypted at rest and never logged or exposed.
- You pay model providers directly when you choose this option.