How does Conservative States keep my account secure?

How we protect your account

• Passwords are never stored in readable form. We keep only a scrambled version made with an industry-standard password hashing method, so even we cannot see your password.
• Two-factor authentication. You can add a 6-digit code from an authenticator app to every sign-in. It is optional for subscribers and supporters and required for organization staff.
• Encrypted connections. Everything between your browser or app and our servers travels encrypted, and sensitive data is encrypted where it is stored.
• Email connections are locked down. When you connect Gmail or Outlook, the access we receive is stored encrypted, and we use it only to send the letters you ask us to send. We never read your inbox. You can disconnect at any time in Settings.
• No card numbers. Payments are handled by Stripe. We never see or store your full card number, only details such as the card brand and last four digits.
• A human check at sign-up. Sign-up forms run a quick automated check to keep bots out.
• Limits on signed-in devices and sign-in attempts. An account can be signed in on a limited number of browsers and devices at once, and repeated failed sign-ins are slowed down.
• Face ID and fingerprint sign-in in the apps are handled by your phone. Your biometric data never leaves your device.

What you can do

• Use a password you do not use anywhere else.
• Turn on two-factor authentication in Settings.
• Sign out on shared computers.
• Be wary of emails asking for your password. Our support team and chat assistant will never ask for your password, a two-factor code or a card number.

If something looks wrong

If you notice a sign-in or a letter you do not recognize, change your password right away and email support@conservativestates.app from the address on your account.

If this does not solve it, email support@conservativestates.app.