Trust & safety

Security at ByUs

Creators trust ByUs with their fans and their income. Here’s how we protect your account, your payments and your work, and how to tell us if you find a problem.

Your password

Passwords are stored only as a strong one-way hash, so nobody at ByUs can see them. We never email your password, and ByUs will never ask you for it. Sign-in attempts are limited, which slows down anyone trying to guess.

Your sign-in

You stay signed in with a secure cookie that only travels over an encrypted connection and that the page itself can’t read. Changing your password signs you out on every other phone and computer straight away. For extra protection, turn on two-step sign-in in Settings: a code by email or from an authenticator app each time you sign in.

Payments and payouts

Card details go straight to Stripe, our payment processor; ByUs never sees or stores full card numbers. Creators get paid into their own Stripe account, and bank details are entered with Stripe, not stored by ByUs.

Members-only content

Members-only photos and videos only show to people who can see them, with a faint watermark naming the viewer, so a leaked copy can be traced. Private messages aren’t read by ByUs unless someone reports them, for fraud or safety, or when the law requires it.

The site itself

Everything on ByUs runs over HTTPS. Pages send security headers that block other sites from loading ByUs inside them, and account changes are only accepted from ByUs itself. Our data is backed up so it can be restored if something goes wrong.

Keeping your account safe

  • Use a password you don’t use anywhere else.
  • ByUs emails come from byusapp.com. If a message asks for your password or card details, it isn’t from us. Forward it to support@byusapp.com.
  • If you think someone got into your account, reset your password on the Forgot password page. That signs out every other device. Then tell us so we can check your account.

Report a security problem

Found a weakness in ByUs? Email support@byusapp.com with “Security report” in the subject. Tell us what you found, the steps to see it, and how it could affect people. We’ll reply within a few days and keep you posted while we fix it.

Please:

  • only use your own accounts, and never look at, change or keep anyone else’s data;
  • don’t slow the site down, send spam or try to trick people;
  • give us a fair chance to fix it before telling anyone else.

We appreciate good-faith reports and will work with you. ByUs doesn’t run a paid bug bounty yet.

Security researchers can also find our contact details in security.txt. For how we use your information, see the Privacy Policy.