Passwords are never stored
Passwords are one-way hashed with a deliberately expensive work factor before they reach the database.
Trust centerUseful by design.
Useful by design.
Private by default.
Security is part of the product architecture, not a setting added at the end.
Secure sessions
Signed, short-lived sessions remain in HTTP-only, same-site cookies and can also support future native bearer flows.
No biometric identity layer
NFC analytics describe the tap—not the person. Approximate region and device category are enough for useful insight.
Separated production services
The NFC database and payment credentials are isolated from every other application.