Your account, locked down.

Every request between your device and MAVULA is protected with HTTPS/TLS. Our certificates are issued and monitored by an independent CA and renewed automatically.

Databases and backups are encrypted at rest. Personal information (names, emails, phones) is never stored in plain text where a third party can read it.

Passwords are hashed with modern industry algorithms (bcrypt) — MAVULA staff cannot read your password. Reset tokens expire in 30 minutes and are single-use.

Sign-up, login, and password-reset endpoints are rate-limited per IP. Repeated failed attempts back off automatically. Suspicious activity is logged for review.

Withdrawals, password resets and account deletions all require confirmation from the account email — nothing sensitive happens on click alone.

We use only what is strictly necessary for you to stay signed in and for us to prevent fraud. No third-party ad trackers. See the Cookie Policy for the full list.