Security & Privacy
Built secure.
By default.
No advertising pixels, no behavioural profiling, no data sold - booking pages carry no ad trackers. On tymeslot.app, Google reCAPTCHA loads once a client starts the booking form, to block spam bookings.
🔐
OAuth 2.0 / OIDC
Google, GitHub, and any OIDC provider. SSO from day one.
🔒
AES Encryption at Rest
Credentials and tokens never sit in plaintext.
🛡️
Rate Limiting
Brute-force protection on by default, not opt-in.
🚫
No Ad Tracking
No advertising pixels or third-party analytics on booking pages. On tymeslot.app, Google reCAPTCHA loads once a client starts the booking form, to block spam bookings.
🔍
Open-source core
Every line public on GitHub under the GNU AGPLv3.
🛑
Tamper-Proof Forms
CSRF protection applied globally - nothing to configure.
Our site and booking pages use self-hosted, cookieless Umami analytics - no third-party analytics company involved.
Read our privacy policy →