Security

How we work to keep your Lokatt account and storage information protected.

Security matters

Your storage information should stay yours.

Lokatt is designed to help you keep track of your physical belongings without giving up control of the information you store about them.

We use reasonable technical and organizational measures to protect accounts and stored information against unauthorized access, loss, misuse, or alteration.

Security is an ongoing process. As Lokatt grows, we will continue to review and improve how the service protects your information.

Account security

Protecting access to your account.

Access to your Lokatt account is protected through authentication. Your account credentials should be kept private and should never be shared with other people.

If you believe that someone else has gained access to your account, change your password and contact us as soon as possible.

Protecting your data

Your boxes, items, photos, and locations belong to you.

Access controls. We use access controls to help ensure that account data is only available to authorized users.
Secure infrastructure. Lokatt relies on established infrastructure and service providers to operate authentication, databases, storage, hosting, and other parts of the service.
Data transmission. Connections to the Lokatt service should be made using encrypted HTTPS connections.
Limited access. Access to production systems and user information is limited to what is necessary to operate and maintain the service.

QR codes and physical security

A QR code connects a physical box to its digital information.

Lokatt QR codes are designed to make it easy to identify a box and access its associated information.

Remember that a QR code is also a physical object. Anyone who can access a label may be able to scan it. For this reason, consider where you place labels and what information you store in your box records.

Good practice

Avoid putting highly sensitive information into box names, descriptions, or photos. Lokatt is designed for organizing your belongings, not for storing passwords, financial information, or other highly sensitive secrets.

Security is a shared responsibility

We work to protect the service, but you also play an important role in keeping your account secure.

Use a strong, unique password.
Never share your password with anyone.
Keep your email account secure.
Log out of shared or public devices.
Be mindful of where you place physical QR labels.
Do not store passwords or other highly sensitive secrets in Lokatt.

Report a security issue

Found something that does not look right?

If you believe you have discovered a security vulnerability in Lokatt, please contact us privately so we can investigate it.

Report a security issue

Please do not include passwords, authentication codes, or other sensitive personal information in your initial report.

No online service can guarantee absolute security. While we work to protect Lokatt and the information stored in it, you should also take reasonable steps to protect your account and physical QR labels.