Security
How we handle accounts and notes.
A small site still has to be careful. These are the practices in place for sign-in, reviews, and contact.
01
Sign-in to write, open to read
Anyone can read the site and the reviews. Posting a rating or comment requires an account — Google, X, or email. You can only remove your own notes. The office may publish a short public acknowledgement under Wystepek Ventures, LLC.
02
Reviews stay with the account, not just a typed name
A display name is what visitors see. The record itself is tied to the signed-in account, so nobody else can quietly post as you.
03
Limits on posting
Comments are length-checked, stripped of hidden characters and pasted markup, and rate-limited so one account cannot flood the board.
04
We do not put account ids on the public list
The public review list shows a name, stars, and the note. Internal ids stay off that page.
05
Contact details are not stored in the browser
The contact form saves the message on our side so we can reply. It does not keep a copy in your browser. For anything urgent, call the office.
06
Passwords
Email accounts need at least 10 characters. Forgot-password links expire in one hour and are sent only to the address on the account. We will never ask you for a password by email, text, or review reply. Sign out from the header when you are done.
07
Browser protections
Responses send standard security headers: the browser will not guess file types, will send a restrained referrer, and will not hand this site camera, microphone, location, or payment access.
Questions: get in touch, or call (724) 317-4367. Also: Privacy notice · Terms.