Security

What we do to keep your account and your plan yours — and what you can do.

Your account

• Passwords are stored scrambled (bcrypt) — nobody, including us, can read them. Very common passwords are refused.
• 2-step sign-in (an authenticator app code) can be turned on under Login & security, with backup codes for a lost phone. The apps ask for the code too.
• Alerts: we email you after a sign-in from a new network, after several wrong passwords, and when a new PC or phone signs in to your plan.
• Sign out everywhere ends every browser session at once; changing your password does the same.
• Too many wrong passwords from one place are slowed down automatically.

Your plan

• The apps sign in with your website account and work on 1 PC + 1 phone at a time. You see every device on your account page and can sign any of them out — it stops within about 10 minutes.
• The apps check your plan with a signed token, so a plan can’t be faked or copied to someone else’s device.

Your data

• The whole site runs over HTTPS. Payments happen on PayPal — we never see card or bank details.
• Your MeetMe logins stay on your devices. Backups leave logins and passwords out.
• Support screenshots can only be opened by you and us.
• No advertising or tracking cookies; page visits are counted without cookies or IP addresses.
• Download everything we hold about you any time under Login & security. See the privacy page.

Found a security problem?

Please tell us privately at support@twistedstudio.live (subject “Security”) before sharing it anywhere. We’ll answer quickly and fix it. Our security.txt has the details.