Security practices
This page is maintained by the Starfire Radio station owner to answer common security and privacy questions. It describes current practices and is not an independent certification.
Access control
Studio tools sit behind authenticated sign-in, and studio actions additionally require an admin role stored server-side. Roles are never inferred from browser storage.
Data protection
- Traffic to the site is served over HTTPS.
- Every database table enforces row-level access rules, so listener messages and ratings are readable only by studio admins.
- Audio lives in a private storage bucket and is played through short-lived signed links.
- System email credentials are encrypted before storage and are never returned to the browser.
Shared responsibility
Hosting, TLS and platform infrastructure are provided by the site's hosting platform. Programming decisions, staff access and how listener messages are handled are the station owner's responsibility. Keeping your own account credentials safe is yours.
Reporting a problem
Found something that looks wrong? Report it through the station message form with the subject "Security". Please do not publicly disclose details before we have had a chance to respond.