Security

• Encryption in transit. All traffic to and from reeltotrip.com is served over HTTPS/TLS.
• Reputable infrastructure. We host on established cloud and database providers with their own strong physical and network security, rather than running our own servers.
• Data minimisation. We collect as little as we can — no passwords, no payment details, no more personal data than the service needs to turn your reels into trips.
• Least-privilege access. Access to production systems and data is limited to what's needed to operate the service.
• Scoped third-party access. Providers that process data on our behalf are contractually limited to that purpose (see the Privacy Policy).
• Monitoring. We keep security and error logs to detect and investigate problems.

We don't store passwords (there are no password accounts), and we don't collect or store payment-card details — the service is free. This removes some of the most sensitive data from our systems entirely.

Because access to your trips is tied to a device identifier in your browser, treat your device like the key to your data: use a passcode, keep your browser updated, and be careful on shared computers. Only submit reels you have the right to access.

If you believe you've found a security vulnerability, please tell us before disclosing it publicly, and give us a reasonable chance to fix it. Email security@reeltotrip.com with steps to reproduce. We welcome good-faith research and will not pursue action against researchers who act responsibly, avoid privacy violations and data destruction, and don't degrade the service.

If a security incident affects your personal data, we will investigate, take steps to contain and remediate it, and notify affected users and regulators where required by law and within the applicable timeframes.

No online service can be perfectly secure. We work hard to protect your data, but we can't guarantee absolute security. Report anything that looks wrong and we'll act on it.