CazaTCG
Security
Security by layers
Access controls, administrator 2FA, request validation, rate limits and audit trails protect the platform.
Last updated: 25 August 2026Media
Avatars are checked for format, size and dimensions, converted to a normalized format without embedded location metadata, and held for review before publication.
Application
Strict validation, CSRF and origin protection, signed replay-resistant webhooks, parameterised queries and SSRF controls protect trust boundaries.
Recovery
Production database backups are scheduled and each dump is checked for PostgreSQL readability before it is retained.