# Security at Cutline

URL: https://gocutline.com/security/

Your calendar and account are stored in the EU, everything travels over HTTPS, and access rules in the database guard your data. There are no passwords to leak, and card details are handled by Stripe, never by us.

## The short version
- Everything travels over HTTPS.
- Your calendar and account are stored in the EU.
- We have no passwords to lose: you sign in with a code by email or with Google.
- Card details never reach us. Stripe handles them.
- The website has no cookies and no trackers.

## Where your data lives
| Company | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | EU (Ireland) |
| Cloudflare | Hosting the site and the app, network security | Worldwide network |
| Stripe | Payments, invoices and payment links | EU (Ireland) and the US |
| Resend | Sending the sign-in code by email | US |
| Google | Only if you link Google Calendar | US |
| Anthropic | Only when you use Coach: writing its answers | US |

The [privacy policy](https://gocutline.com/privacy/) has the full list and how data outside the EU is protected.

## How your data is protected
- **Encryption in transit:** the site and the app only answer over HTTPS, and browsers are told to always use it (HSTS).
- **Access rules in the database:** row-level security decides who can read what, in the database itself, not only in the app.
- **Private by default:** your calendar is yours. The Arena shows only totals, and only if you join.
- **Secrets stay on the server:** keys for payments and email live in server-side functions, never in the code your browser downloads.
- **Browser protections:** the site sets headers that stop other sites from framing our pages or from using your camera, microphone or location through them.

## Sign-in
Cutline does not use passwords. You sign in with a code sent to your email address, or with Google. That means there is no password of yours for us to leak. [How signing in works](https://gocutline.com/help/sign-in/).

## Payments
Cards are handled by Stripe. We keep your Stripe customer number, plan and invoices, but we never see your card number. If you sell through payment links, you connect [your own Stripe account](https://gocutline.com/help/get-paid-with-stripe/) and the money goes there.

## Linked calendars
When you link a calendar, its events are read to show in your week as read-only blocks. You can remove a link at any time under Settings, Calendars.

## Your control
You can [delete your account](https://gocutline.com/help/delete-your-account/) yourself at any time. It deletes your calendar, posts, messages and @name for good.

## What we do not have yet
Cutline is a young company. We have no SOC 2 or ISO 27001 certificate, and we would rather say so than imply otherwise.

## Found a problem?
Write to hello@cutline.website with what you found and how to repeat it. We read everything, and we are grateful to anyone who reports a problem in good faith. Our contact details for security are also in [security.txt](https://gocutline.com/.well-known/security.txt).

---
Cutline: Cutline is a weekly calendar and planner that turns time blocks into XP, levels and streaks. You plan your week in blocks, tick each one off when it is done, and see your progress on a social feed (the Floor) and a weekly leaderboard (the Arena). Planning and budgeting are free; paid plans add a badge, posting, messaging, shared calendars and lower selling fees, from $9 a month. Pro is free to try for 7 days.
Facts: https://gocutline.com/facts/ · Updated 2026-11-06