Security & your password
You trust us with your account and your team's estimation sessions. We take that seriously. This page explains, in plain language, how we store your password and what else we do to protect your account — no marketing spin, just how it actually works.
At a glance
| Topic | How Estimr does it |
|---|---|
| Password storage | Irreversibly encrypted (bcrypt hash), never as readable text |
| Can anyone read your password? | No — not our staff or administrators either |
| Connection | Fully encrypted over HTTPS (TLS) |
| Protection against guessing | Automatic lockout after repeated failed attempts |
| Forgotten password | Secure, time-limited reset link by email |
| Payment details | Handled by Stripe — we store no card details |
| Where is your data kept? | On servers within the European Union |
How we store your password
When you choose a password, we don't store it the way you type it. Instead, we run it through a so-called hash function (the proven bcrypt algorithm, the industry standard). That turns your password into an unreadable string of characters that cannot be reversed back to the original.
- Irreversible: your password cannot be derived from the stored string.
- Unique per user: a random “salt” is automatically added to every password. Two people with the same password therefore get a completely different stored value.
- Deliberately slow: the algorithm is intentionally compute-heavy, making large-scale automated guessing prohibitively slow for attackers.
When you log in, we compare your entered password against the stored string in a secure way — without ever keeping or displaying the original password anywhere.
What this means for you
Because we never store your password in readable form, no one can read it — not us, and not an attacker who might somehow reach our data. In practice, that means:
- We will never ask you for your password; we simply cannot see it.
- Forgotten your password? We'll reset it via a secure link — we never send you your old password, because we don't have it.
Extra protection around your account
- Protection against guessing (rate limiting): after a number of failed login attempts, further attempts are temporarily blocked. This makes automated attacks all but pointless.
- Encrypted connection: all traffic between your browser and Estimr runs over HTTPS (TLS), so data cannot be read in transit.
- Secure password-reset links: a reset link is valid only for a limited time and becomes invalid after use. The link itself is also stored only in encrypted form on our side.
- Email verification: at registration we confirm that your email address really belongs to you.
- Action on suspicion: if ever needed, we can require an account to set a new password at the next login.
Payments
Payments are handled by Stripe, a certified payment provider (PCI-DSS). Your card details go directly to Stripe and are not stored by Estimr.
Where your data is kept
Your data is stored on servers within the European Union (Dutch hosting). You can read more about this in our privacy statement and GDPR page.
Your part matters too
The strongest security starts with a good password. Use a unique, long password that you don't use anywhere else — ideally through a password manager. That keeps your Estimr account safe even if another website is ever breached.
Found a vulnerability?
Think you've discovered a security issue? We greatly appreciate responsible disclosure. Feel free to email us at sven@vogelezang.nl and give us the chance to fix it before making it public.