Plain English

How the shop computer and passwords stay locked

This is not a legal contract. It is what we actually do so a random person on the internet cannot walk into the site, the booking box, or your Facebook token.

The computer in Germany (VPS)

• It only lets Logan in with a key file, not a typed password.
• The “root” super-user login is off.
• The firewall only opens the website (80 and 443) and SSH (22). Booking software listens on the machine itself, not on the public internet.
• fail2ban blocks people who hammer the login.
• Secret keys live in one file only Logan’s user can read.
• Extra jobs (lead harvest, shorts factory, extra search, extra voice) stay off so they are not sitting in memory.

Your laptop

• Proton VPN and Malwarebytes are the right kind of extra.
• Do not paste Facebook, TikTok, or Hugging Face tokens into chat, email, or Telegram.
• DuckDuckGo tabs use a lot of RAM. Close extras. Do not Task-Manager-kill Cursor.

Tokens (the long passwords apps give us)

• They expire. Facebook’s last one died about day 60. That is normal, not a hack.
• New ones go in the secret file on the VPS. Then you say “token saved.” We never need to see the letters.

What we will not do

• Message strangers on WhatsApp from numbers copied off Facebook.
• Upload your customer list to a public Hugging Face demo.
• Keep the only copy of a paid site on our Vercel after we transfer it to you.

Questions: hello@brightreelsmedia.online · Book 15 min