Short answer: yes, and here's exactly how. Security isn't a checkbox for us — it's built into how the app works.

Your account

Passwords are never stored in plain text. They're hashed with bcrypt, so even we can't read them.
Sign in with Google or a passkey (your fingerprint/face) if you'd rather not use a password at all.
Optional captcha protects sign-up and password reset from bots.
Password-reset links are single-use and expire after an hour.

Your payments

Card details are handled entirely by Stripe's hosted checkout — Slotora never sees, touches or stores your card number.
Slotora never holds your money: payments flow straight to the organiser's own Stripe account. There are no wallets or balances to breach.
Every payment webhook is cryptographically signature-verified, so payment status can't be forged.

Your data & privacy

We collect only what's needed to run your events, and we never sell your data. There are no ads, ever.
Private things stay private: members-only group events, private threads, and private comments are access-controlled on the server, not just hidden in the app.
Traffic is encrypted in transit (HTTPS everywhere).
You can delete your account and data any time from Settings → Account.

Keeping the community safe

Report buttons on profiles, messages and fundraisers flag anything to our moderation team.
Block stops unwanted messages — quietly, without tipping the other person off.
Groups can mark younger members as supervised so they can take part without being messaged.
No gambling or prize mechanics of any kind — fundraisers are contribution-only.

We also review the codebase for security issues regularly and fix them promptly. Found something that looks wrong? Email security@slotora.app — we take reports seriously.

Is Slotora safe?

Related articles