Security & Privacy

Your security and privacy are our top priorities at OrangeCat

Our Security Philosophy

OrangeCat is built on Bitcoin-first principles, which means we prioritize decentralization, self-custody, and transparency. We never hold your funds, and we design our systems to minimize the data we collect while maximizing security.

Bitcoin Security

Your Bitcoin remains under your control. We facilitate payments but never custody funds.

Data Minimization

We collect only the minimum data necessary to provide our services.

Security Features

End-to-End Encryption

All data transmission is encrypted using industry-standard TLS 1.3 protocols.

Self-Custody Bitcoin

We never hold your Bitcoin. You maintain full control over your private keys and funds.

Row Level Security

Database-level authorization ensures users can only access their own data.

Secure Infrastructure

Hosted on enterprise-grade cloud infrastructure with 99.9% uptime SLA.

Transparency

Open source codebase allows for public security audits and community review.

Security Monitoring

24/7 monitoring and automated alerts for suspicious activity.

Authentication & Authorization

Multi-factor authentication support
Secure password hashing with bcrypt
Session management with automatic expiration
OAuth 2.0 integration for social login

Data Protection

Personal data encryption at rest
Regular security audits and penetration testing
GDPR compliance for EU users
Data minimization principles

Bitcoin Security

No custody of user funds
Support for hardware wallet integration
Lightning Network payment security
Transaction transparency on blockchain

Security Concerns?

If you have security concerns or believe you've discovered a vulnerability, please contact us immediately.

Report Security Issue View Documentation

This security page was last updated on 1/22/2026. Our security practices are continuously reviewed and updated.