CaptureSites

Security

Placeholder text. This page is a draft outline and is not the final, legally reviewed version. It will be replaced before launch.

[PLACEHOLDER] An overview of how CaptureSites protects buyers, sellers and their data.

Payments

  • [PLACEHOLDER] Card and bank payments are processed by Stripe (PCI DSS Level 1). We never store card numbers.
  • [PLACEHOLDER] Funds are held until the domain transfer is confirmed.

Domain transfers

  • [PLACEHOLDER] Transfer (auth) codes are encrypted at rest.
  • [PLACEHOLDER] Transfers run through our registrar partner with the buyer as registrant.

Accounts

  • [PLACEHOLDER] Passwords are stored as salted hashes, and email verification is required.
  • [PLACEHOLDER] Login, signup, password reset and contact are rate-limited.

Reporting a vulnerability

[PLACEHOLDER] Please report security issues through our contact form.