Security & privacy

Trust is built into the architecture.

OuRello Cards combines deliberate publishing, minimal data flows and independent product boundaries.

Draft stays private

Changes only become public after you explicitly publish them.

Strong password hashing, server-side sessions, CSRF protection and limited login attempts.

Uploads are checked by type and size, reprocessed and stored without executable metadata.

Cards has its own backend, database, network, storage and deployment cycle.

Export, hide or delete your identity directly from your account.