Security

Accounts and passwords

• Passwords are stored salted and hashed. We never store the password itself and cannot read or recover it.
• Sessions use a long random identifier and expire on their own.
• Signing out clears the session immediately.
• Sign-up and sign-in are protected by Cloudflare Turnstile and rate limiting, to blunt automated guessing and abuse.

Household isolation

Every piece of content in Magnet belongs to a household, and requests are checked against the household of the signed-in user. One family cannot read another family's data.

Within a household, roles decide what each person sees. Adults see everything they are given access to; children get a narrower view with money hidden; guests are read-only.

Invitations

People join a household through a single-use invite code created by an adult in that household, which carries the role they will get. There is no open registration into an existing household.

Infrastructure

Magnet runs on Cloudflare's network. Traffic is served over HTTPS, the database and photo storage are Cloudflare services, and administrative tooling sits behind a separate, access-controlled hostname.

What we do not do

• We do not run third-party analytics or advertising code, which is a common source of data leakage.
• We do not send your household's content to model training.
• We do not ask for payment card numbers directly; payment is handled by a payment provider.

Reporting a vulnerability

If you find a security problem, email security@magnet.family with enough detail to reproduce it. Please give us a reasonable chance to fix it before disclosing it publicly. We will not pursue action against anyone reporting in good faith who avoids privacy violations, data destruction and service disruption.