Security

Infrastructure

• HTTPS everywhere (TLS 1.2+)
• HSTS enabled on momei.ink
• API keys stored in server environment variables only — never in frontend code
• Docker container isolation

Data handling

Prompts are sent to AI providers for generation. We do not sell user data. Generation logs are stored in a local database for service operation.

Payment security

All payments processed through Stripe. We never see or store your card number.

Report a vulnerability

Email security@momei.ink. We appreciate responsible disclosure.