Last updated 13 November 2026.
Found a weakness?
Write to hello@qwertime.com with what you found and how to see it. We answer within 3 working days, keep you told while we fix it, and say thank you by name if you like. Please give us time to fix it before telling others, test only with your own account, and do not read, change or delete what is not yours, or slow the site for others.
How we keep it safe
- In transit: every page over HTTPS (TLS, certificates from Let's Encrypt), and browsers told to use nothing else (HSTS).
- Logging in: passwords are kept only as slow, salted hashes; a password is followed by a code sent to your email; easy-to-guess passwords are refused.
- AI assistants: each has a token of its own that you can revoke on Connect AI, uses only the tools you allow, and asks you before deleting.
- The servers: only the web and a key-only administrators' door are open to the internet; the database is reachable only from the server itself; security updates install themselves.
- Backups: every night, kept 14 days, and restored now and then to check them.
- Watching: errors, slowness, the disk, memory and backups are watched every minute, and the admins are told when something is wrong.
- Changes: every change is tested (nearly every line of the program) before it goes live, and goes live without taking the site down.
- Your data: what you delete is gone at once, and from backups within 14 days; you can delete your whole account in Settings (see Privacy).