Security

We take reasonable steps to protect Midway Metric and the data clients and the public trust us with. This page is a plain-language summary — not a guarantee of perfect security.

• Connections to the product use HTTPS in production.
• Passwords are stored as one-way hashes, not in plain text.
• Card numbers are handled by Stripe, not stored on our servers.
• Operator and super-admin tools are limited to signed-in roles.
• Sign-in and public forms are rate limited to reduce abuse.

If you believe you have found a vulnerability, email james@midwaymetric.com. See also our Privacy Policy and Terms of Service.