Security at SpellMistake
This page explains how we protect SpellMistake, our free tools and the data you share with us, and how to report a security problem. We keep our setup simple, up to date and built on trusted services.
- HTTPS encryption on every page
- Cloudflare protection against attacks and bots
- Tools only fetch public URLs and block private networks
- Rate limits and spam checks on tools and forms
- Regular updates, backups and limited admin access
- Security reports handled as our top priority
1. How We Protect the Website
- HTTPS everywhere. All traffic between your browser and SpellMistake is encrypted with TLS.
- Cloudflare. Our site sits behind Cloudflare, which helps block attacks, bad bots and traffic floods.
- Updates. WordPress, our theme and our plugins are kept up to date, and we remove software we do not use.
- Limited access. Only our core team can access the admin area, with strong, unique passwords and the lowest access each person needs.
- Backups. We keep regular backups so we can restore the site quickly if something goes wrong.
2. How Our Tools Stay Safe
- Writing tools run in your browser. The Spell Checker, Word Counter and Article Rewriter process your text on your own device.
- Public URLs only. Tools that read websites only fetch public addresses. Requests to private or internal networks are blocked.
- Limits on every request. Time limits and response size limits stop a slow or very large page from causing problems.
- Fair use limits. Each visitor can run a set number of checks per minute and per day, which protects the service from abuse.
- Short-lived cache. Results are cached for a few minutes to keep tools fast, then deleted.
3. How We Protect Forms
Our contact, bug report and quote forms use hidden spam traps, a short time check and a limit on how many messages can be sent in a short period. Messages are stored privately on our server and are only seen by our team.
4. How We Protect Your Data
We collect as little personal data as we can and keep it only as long as we need it. Read our Privacy Policy to see what we collect and why. Please never send passwords, payment details or highly sensitive information through our forms or tools.
5. How to Report a Security Problem
If you find a security problem on SpellMistake, please tell us privately first so we can fix it before anyone misuses it.
- Email hello@spellmistake.com with “Security report” in the subject.
- Describe the problem, the page or tool affected and the steps to reproduce it.
- Give us reasonable time to fix it before you share it publicly.
We will confirm that we received your report, keep you updated and thank you once it is fixed. Security reports are handled as our top priority.
6. Testing Rules
When looking for security problems, please do not access or change other people’s data, run denial of service or spam tests, use automated scanners that send large amounts of traffic, or try social engineering on our team. Testing in good faith within these rules is welcome.
7. What Is Not a Security Issue
Tool results you think are wrong, broken links or layout problems are bugs, not security issues. Please report them on our bug report page.