Security
Encryption in transit
The website and API are served over HTTPS. Photo uploads use short-lived signed URLs directly to our object storage, so your images never pass through our application servers in the clear.
Storage
Photos and print renders live in private object storage with access controlled by signed URLs and server-side keys. We do not expose your uploads as public files.
Account access
Sessions use HTTP-only cookies with hashed passwords at rest. Admin tools are gated to authorised staff accounts only.
Questions
For a security concern or data request, email contact@mailamoment.com and we will respond promptly.