Security

An honest account of how CityPulse protects you — written for readers, not auditors.

What's in place today

  • Transport: CityPulse is served over HTTPS; we never ask for credentials or payment details over plain HTTP.
  • Payments: partner subscriptions are checked out and processed by Stripe. Card numbers never touch our servers.
  • Little to steal: explorers browse without an account, so there is no explorer password database and no explorer payment data on our side. We collect the minimum needed to run the service (see the privacy policy).
  • Outbound bookings: when you follow a listing to a venue or booking partner, that transaction happens on their site, under their security and privacy practices. We link; we don't intermediate your card.
  • No data sales: we don't sell explorer data and don't share it with advertisers. Our revenue is partner placement and booking commissions, not your information.

What we don't claim

  • We are not SOC 2 certified and have not completed a third-party penetration test. We'll say so plainly until we have.
  • Featured placement is a paid position, always labeled — it is not a security or quality certification of a business, and it doesn't change how we treat your data.

Report a vulnerability

Email don+citypulse@lifeofmorr.com with details. We aim to acknowledge within 2 business days.