At SnackMagic, security is paramount, and our practices reflect that commitment:

1. HTTPS Protocol:  The full site runs behind HTTPS, a protocol for securing the communication between the user's browser and the web server.
   
   

2. User Passwords:  We do not store user passwords in plain text. The passwords are hashed using one-way encryption and there is no way to retrieve passwords.
   
   

3. Credit Card Numbers: Your credit card numbers are never stored on our servers. They are stored at secure vault servers on Stripe. We only have the last 4 digits of the card. Stripe has been audited by a PCI-certified auditor and is Certified to PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry.
   
   

4. Data Passing:  Even when this information is passed through our servers - this information is masked so that it is not logged on our servers.
   
   

5. Virtual Private Cloud (VPC):  Everything is behind a VPC (Virtual Private Cloud) on AWS (Amazon Web Services). Nobody has direct access to the servers.
   
   

6. Stringent Development Practices:  We follow the best Software Development Practices to avoid cross-site scripting, SQL injections, etc
   
   

7. Employee Access:  We manage employee permissions. Employees are granted access only to information that is necessary for accomplishing their jobs. All employees' actions are logged and an audit trail is maintained.
   
   

8. Password Rotation: To further enhance security, all passwords are changed at regular intervals.