How we protect MatchMyIdea
Security should be understandable without a wall of claims.
Everything on this page is something we actually do. We don't hold formal security certifications, and we won't name one here until an independent auditor has actually issued it.
Accounts and sessions
Sign-in is handled by a managed authentication provider. MatchMyIdea never sees or stores your password. We only receive confirmation that you signed in successfully, and a session cookie keeps you signed in.
Private searches
Ideas and search results are private by default. They're never published, never shared with other users, and never placed in URLs, so a copied link or a browser history entry doesn't expose what you're working on. Private results carry noindex instructions and are excluded from our sitemap, so search engines don't list them.
All traffic to MatchMyIdea runs over HTTPS, served through Cloudflare. Your idea text, clarification answers, and results are encrypted between your browser and our servers.
Payments
Match purchases are processed by Stripe. Card numbers go directly to Stripe and never touch our servers. What we keep is payment status: which pack you bought and whether the payment cleared.
Access to production systems
The internal tools we use to operate the product are access-controlled, and administrative actions are logged in an audit trail. Nobody browses user searches casually. Access exists to run the service and to answer your support requests.
Backups and recovery
Account data, saved searches, and delivered matches are backed up regularly, so a failure on our side does not erase your projects.
Reporting a security issue
If you think you've found a vulnerability, tell us privately before sharing it anywhere else. Use the contact page and choose Security, or email hello@matchmyidea.com. A person reads every report.
What we collect and why is in the privacy policy. If you appear in a match and want something corrected or removed, see data, privacy and corrections.