This article describes what you do to protect your account and what Lovely Render protects for you.
Protect your account
Your login stays in your hands. Four habits protect it.
- Turn on two-factor authentication. A code is then requested at every login.
- Keep your backup codes somewhere other than your phone.
- If an email tells you about a login that is not yours, click That wasn’t me. A page then offers to log out all your devices.
- Give each member the narrowest role that is enough for them. Reserve the Can publish option for a few people.
On an unknown device, a code received by email is requested in addition to the password. Every change of password or email address is reported to you by email. Log in and protect your account describes each step.
What Lovely Render protects for you
- Your site is served over HTTPS as soon as your domain name points to Lovely Render. The certificate renews itself.
- Your site is hosted in France, separate from the other sites on the platform.
- The server and the product receive their security updates without any action from you.
- Bots are kept away from your forms and your analytics.
- The messages your visitors send through your forms are stored encrypted.
Roll back
Your site keeps its latest published versions. You can put one back online from the version history. Restore a site version explains how.
Your site is also backed up every night, in France. To get your site back as it was on a specific night, write to us.
See who did what
The history records every action taken on your site, with its author and date. No one can erase it from the site. When our team steps in at your request, its actions appear there under the person’s name. Read your site’s history explains how to view it.
Export your data
Exporting a form’s requests or the whole site requires a confirmation code. The site owners are notified by email. Export your requests and Take your site with you describe these two exports.
Erase a visitor’s data
Your analytics and your form requests erase themselves once their retention period ends. To erase a visitor’s data sooner at their request, delete their request from the Production view of your forms.