Security
Security at FOGSPACE
FOGSPACE is built on a non-custodial, end-to-end encrypted architecture where identity and cryptographic keys are owned strictly by the user.
Security Model
- Non-custodial: You own your cryptographic keys — we never have access to them.
- End-to-end encrypted: Messages are encrypted on your device and decrypted only by the recipient.
- Zero-knowledge: We cannot read your messages, see your keys, or access your wallet.
- Peer-to-peer: Value transfers settle directly between users without intermediaries.
- QR-first authentication: No passwords to steal — login is verified via your mobile device.
Responsible Disclosure
If you discover a security vulnerability, please report it responsibly:
- Email: [email protected]
- Policy: /.well-known/security.txt
- PGP: available on request
We acknowledge reports within 72 hours and provide a resolution timeline within 7 days.
Independent Review
We welcome independent security research and review of FOGSPACE's architecture. If you are a security researcher interested in reviewing our design, please reach out via the disclosure channel above.
What We Do Not Do
- We do not store your private keys.
- We do not access your encrypted messages.
- We do not share your data with third parties.
- We do not use your data for advertising.
- We do not track you across sites.
Security Policy
Full disclosure policy: /.well-known/security.txt