Security

All traffic between your browser and VolunteerHub is protected with HTTPS encryption, so the information you enter is scrambled while it travels across the internet.

We never store passwords in plain text. They are hashed using a strong, industry-standard algorithm (scrypt), which means even we cannot read them.

Sign-in sessions are managed with signed, HTTP-only cookies that cannot be read by scripts in the browser, reducing the risk of session theft.

Each organization’s data is kept separate. Every request is checked so that an account can only see and edit its own sheets, sign-ups, and settings.

VolunteerHub runs on established, security-focused platforms — Vercel for hosting and Supabase for the database and file storage — with data encrypted in transit and at rest.

If you believe you’ve found a security vulnerability, please let us know right away at support@volunteerhub.space. We appreciate reports made in good faith and will work quickly to address them.