Security & trust
Plain answers about how your account, payments, and videos are protected.
Account security
Sign-in runs on Firebase Authentication with Google SSO or email + mandatory email verification. Admin operations are separately gated server-side.
Payments by Stripe
All checkout happens on Stripe-hosted pages. Your card number never touches VidThanks servers, and webhook signatures are verified on every payment event.
Encrypted in transit
The site, API, and every video stream are served exclusively over HTTPS/TLS. Videos are stored and delivered through Cloudinary’s CDN over encrypted connections.
Consent-first tracking
Analytics and marketing pixels load only after you grant consent in the cookie banner — GDPR/ePrivacy-aligned by default, with a preferences panel to change your mind.
Abuse protection
Public API endpoints enforce rate limits, origin checks, and input validation; payment endpoints require authentication and use server-side prices only.
Your data, your call
Want your account or videos removed? Contact us and we delete them. Recipient video pages are unlisted links — only people you share them with can view.
Security question or something to report? Contact us — responsible disclosure is always welcome. See also our privacy policy.