🔐 Security at CountTogether

Our Approach

At CountTogether, we take the security of your data seriously. We design and operate our systems with a focus on minimizing risk and protecting user information.

Secure Communication

All communication between your device and our services is encrypted using HTTPS.

• Support for modern TLS standards (TLS 1.2 and 1.3)
• Secure WebSocket connections (wss://)

Data Hosting & Infrastructure

CountTogether's infrastructure is hosted in Germany, within the European Union. All core application data — accounts, counters, and activity — is processed and stored on servers located in the EU, in line with the General Data Protection Regulation (GDPR) and applicable German data protection law.

• Production systems are isolated from development and testing environments to reduce the risk of accidental data exposure.
• Where an optional third-party service (for example, analytics) processes data outside the EU, it does so only with your consent and under a recognized legal transfer mechanism. See our Privacy Policy for details on each processor.

Account Security

We implement standard measures to protect user accounts, including:

• Secure password hashing using established industry practices
• Rate limiting to reduce the risk of automated attacks

Users are encouraged to choose strong and unique passwords.

Data Protection

We only collect and store data necessary to provide our service.

• Data is stored in secure databases
• All data transmission is encrypted

Counter data is not kept indefinitely: inactive counters are automatically removed after a period of inactivity, and you can permanently delete your entire account and all associated data at any time from within the app.

For more details, please refer to our Privacy Policy.

Monitoring & Reliability

We continuously monitor our systems to detect and respond to issues.

• Centralized logging and system monitoring
• Error tracking to quickly identify and resolve problems

Responsible Disclosure

If you discover a security vulnerability, please report it to us:

Email: security@counttogether.app

We acknowledge reports promptly, investigate every submission, and keep reporters informed as a fix is developed and deployed.

We appreciate responsible disclosure and will investigate all valid reports.

Continuous Improvement

Security is an ongoing process. We continuously improve our systems and practices to better protect our users.

Hall of Fame

We are grateful to the security researchers who have responsibly disclosed vulnerabilities to us.