Account protection
- Email verification before account activation
- Secure password reset links
- Encrypted local session storage on Windows
- Production and development backends kept separate
Security
Protecting Synq accounts
Synq separates local launcher data from cloud account services and does not request third-party launcher passwords.
Local-first data
Launcher paths, observed local sessions and exported diagnostics remain local unless the user explicitly chooses an online feature or export.
Report a vulnerability
The official security reporting address is being prepared. Reports should include the affected version, clear reproduction steps, expected and actual behavior, and impact. Do not access other users' data or publish an unpatched issue.