Cutline
Security at Cutline
Your calendar and account are stored in the EU, everything travels over HTTPS, and access rules in the database guard your data. There are no passwords to leak, and card details are handled by Stripe, never by us.
The short version
- Everything travels over HTTPS.
- Your calendar and account are stored in the EU.
- We have no passwords to lose: you sign in with a code by email or with Google.
- Card details never reach us. Stripe handles them.
- The website has no cookies and no trackers.
Where your data lives
| Company | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | EU (Ireland) |
| Cloudflare | Hosting the site and the app, network security | Worldwide network |
| Stripe | Payments, invoices and payment links | EU (Ireland) and the US |
| Resend | Sending the sign-in code by email | US |
| Only if you link Google Calendar | US | |
| Anthropic | Only when you use Coach: writing its answers | US |
The privacy policy has the full list and how data outside the EU is protected.
How your data is protected
- Encryption in transit: the site and the app only answer over HTTPS, and browsers are told to always use it (HSTS).
- Access rules in the database: row-level security decides who can read what, in the database itself, not only in the app.
- Private by default: your calendar is yours. The Arena shows only totals, and only if you join.
- Secrets stay on the server: keys for payments and email live in server-side functions, never in the code your browser downloads.
- Browser protections: the site sets headers that stop other sites from framing our pages or from using your camera, microphone or location through them.
Sign-in
Cutline does not use passwords. You sign in with a code sent to your email address, or with Google. That means there is no password of yours for us to leak. How signing in works.
Payments
Cards are handled by Stripe. We keep your Stripe customer number, plan and invoices, but we never see your card number. If you sell through payment links, you connect your own Stripe account and the money goes there.
Linked calendars
When you link a calendar, its events are read to show in your week as read-only blocks. You can remove a link at any time under Settings, Calendars.
Your control
You can delete your account yourself at any time. It deletes your calendar, posts, messages and @name for good.
What we do not have yet
Cutline is a young company. We have no SOC 2 or ISO 27001 certificate, and we would rather say so than imply otherwise.
Found a problem?
Write to hello@cutline.website with what you found and how to repeat it. We read everything, and we are grateful to anyone who reports a problem in good faith. Our contact details for security are also in security.txt.
Plan your week on Cutline
Free forever for planning, XP, streaks and the Arena. Reserve your @name now.