Security
Your Account. Your Data. Our Responsibility.
Trust is earned with practices, not promises. Here is exactly how we protect you.
Two-Factor Authentication (2FA)
Members can secure their accounts with time-based one-time passwords (TOTP). 2FA protects your account even if your password is compromised, and can be managed anytime from your security settings.
Wallet Verification
Connecting an external wallet requires cryptographic signature verification — proving ownership without ever sharing your private keys. We never ask for your seed phrase, and we never will.
Identity Verification (KYC)
Certain elevated features require identity verification to meet compliance obligations and protect the community. Verification data is handled with strict access controls and used only for compliance purposes.
Data Protection & Isolation
Your data is isolated at the database level with row-level security — members can only access records they are permitted to see. Data is encrypted in transit, and privacy consent is required at signup.
Member Safety
The platform is restricted to members 18 and older, with community guidelines, reporting tools, and moderation to keep the community safe.
Continuous Improvement
We run recurring security reviews of our platform configuration, dependencies, and access policies, and we act on responsible disclosure reports promptly.
Report a vulnerability
If you believe you've found a security issue, contact security@thephyx.net with details. We triage reports within 24 hours and will not pursue action against good-faith research that respects member privacy. Please note: this page describes our security practices and is not a guarantee or a bug bounty program.