Security

We hold the ledger. We do not hold cards.

CoinBased is a custodian of platform credits. That is the product. Card PANs never enter this origin in production; sandbox tokens only for now.

Independent of Coinbase, Inc. We will never show a Coinbase login or ask for a crypto seed phrase.

Surface	Rule
Passwords	scrypt. Never stored in the clear.
Sessions	HttpOnly, SameSite=Lax, HMAC-signed cookie. Bearer token also accepted.
Client secrets	SHA-256 at rest. Shown once. Required on verify.
Ledger	BEGIN IMMEDIATE. Balance cannot go negative. Spends are append-only.
Fiat	Sandbox tokens only. Live processor not connected.
Popup	postMessage locked to the merchant origin passed into the charge URL.