Safety & Security
How the coin system is protected, and how to keep your account safe.
Your account
- Passwords are hashed — nobody, including admins, can read them.
- Use a password you don't reuse anywhere else.
- Turn off “Remember me” on shared devices so the session ends when the browser closes.
Your coins
- Balances live server-side and can only change through audited functions — a browser can never edit them.
- Row-level security means no member can read or touch another member's balance, codes or withdrawals.
- Every task attempt, checkpoint and redemption is written to the admin audit log.
Your codes
- Each task code is single-use and tied to the account that earned it.
- Codes are only issued after a checkpoint is genuinely recorded by our server.
- Never share a code — once redeemed by someone else it cannot be restored.
Spotting scams
- We never ask for your password, and we never ask for payment.
- Rewards are fulfilled manually by our team from inside your account only.
- Ignore anyone offering “free coin generators” — they are phishing attempts.
See also our privacy policy.