Security

Security, with honest boundaries.

ronova.dev uses practical protections, but it does not pretend that the public web can offer perfect secrecy.

Support messages are encrypted in the browser before storage so the message body and optional contact field do not need to remain readable on the server.

Private pages are protected at request time behind access codes and scoped sessions. They are not shipped as unlocked content inside the public frontend bundle.

No public-contact or private-access flow should be treated as an absolute guarantee. Share access codes carefully, keep your own local records when needed, and assume that basic network metadata can still exist.