Security
How we protect your data
A plain-English summary of the protections we use.
Encryption in transit
Every connection to getlocal uses HTTPS (TLS) with HSTS, so data between your device and us is encrypted.
Access controls
Our database uses row-level security on every table, so each request can only read or change what that account is allowed to. Private chat media is only served to people in that conversation. Admin access is limited to an allowlist and every admin action is logged.
Bot and spam protection
Sign-up, sign-in and contact forms are protected by Cloudflare Turnstile, and message requests are rate-limited.
We don’t sell your data
We never sell personal information. See the Privacy Policy for who we share data with and why.
Report a vulnerability
Found a security issue? Please contact us via the Help centre and we’ll respond promptly.