How we keep your store and your customers safe
Your store holds your customers' details and takes their payments. This is how wildhoney.io looks after both.
Payments go through Stripe
Customers pay on Stripe's checkout, inside your store. Card details go straight to Stripe and never reach wildhoney.io's servers. Stripe is certified to PCI DSS Level 1, the highest level for card payments. Payments land in your own Stripe account; we never hold your money.
Hosted in Singapore
The app runs on DigitalOcean in Singapore. Your store's database (Neon) and files (Amazon S3) are in AWS's Singapore region. Images reach shoppers through Amazon CloudFront's worldwide network, and email is sent through Amazon SES in the United States.
Encrypted connections
Every page is served over HTTPS: wildhoney.io, your free store address and your own domain. Browsers are told to use only HTTPS for wildhoney.io for a year (HSTS).
Each store's data kept apart
Every record belongs to one store, and the database itself enforces it (PostgreSQL row-level security), so one store can never see another store's orders or customers.
No passwords to leak
Store owners and their team sign in with a one-time code sent to their email, so there's no password to guess or reuse. wildhoney.io staff must also use an authenticator app (two-factor sign-in) to reach the operations console.
Spam and abuse
Sign-in, signup and contact forms are rate-limited, and wildhoney.io's own forms use Cloudflare Turnstile to stop bots. Anyone can report a store that breaks our rules.
Backups
The database keeps a point-in-time history of at least 7 days, so it can be restored to any moment in that window.
Your data is yours
The store owner can download products, orders, customers and newsletter subscribers at any time. Our Privacy Policy and other policies explain how personal data is handled under Singapore's Personal Data Protection Act (PDPA).
Found a security problem?
Email [email protected] with "Security" in the subject line. Please give us a chance to fix it before telling anyone else. We reply within one business day.
Last reviewed 15 November 2026.