Security depends on more than a lock icon or a product name. Start by checking the address, protecting the account, and understanding what information a service keeps. This guide does not assert an independently audited encryption design for every Oernoe product.
Check the address before signing in
Open Oernoe Account at account.oernoe.com/auth/login. Read the hostname from right to left: a page whose name merely contains “oernoe” can still belong to someone else. Use the service directory when you are unsure which address is correct.
Use a unique password stored in a password manager. Do not send passwords, recovery links, or verification codes to support or to someone in a chat. On a shared device, sign out when finished and avoid saving account credentials in the browser.
HTTPS protects the connection
HTTPS encrypts traffic between your browser and the server identified by the certificate. Your browser can show connection and certificate information. If it displays a certificate warning, stop and verify the address. Do not bypass the warning to submit a password or private record.
HTTPS is not the same as end-to-end encryption. It does not by itself show who can read stored data, how backups work, or how long records remain. Exact protocol versions and storage algorithms require service-specific evidence; a general guide should not promise them for an entire network.
Stored information and account access
The Privacy Policy describes information Oernoe may receive, including account details, support messages, and technical or security logs. Product policies may add details for conversations, uploads, or health information. Review those terms before putting sensitive material into an application.
Give an application only the information needed for the task. For example, a support report about a broken link needs the page address and an error description, not a complete health record or an API key. Remove secrets and unrelated personal information from screenshots and attachments.
Deletion is a request with a scope
Deleting an item, deleting a conversation, and closing an account can affect different records. The privacy policy allows retention where needed for service operation, security, legal obligations, and disputes. Do not assume that deleting a visible item immediately erases every backup or security log.
For an export or deletion request, use the privacy request instructions. Identify the service and the action you want. Send the request from the account email where possible, and wait for any verification step before treating the action as complete.
Report a security concern
Contact privacy@oernoe.com with the affected hostname, what you observed, and a way to reach you. Share the minimum evidence needed to explain the issue. Do not test another person’s account or send private records that do not belong to you.
No online service can promise absolute security. A clear account of supported controls and known limits is more useful than a blanket guarantee.