Last updated: June 23, 2026
The site is served over HTTPS with HSTS preload. All API calls go over TLS 1.2+.
Waitlist submissions are rate-limited per IP to prevent abuse. The exact limit is a moving target to deter scraping.
Waitlist entries are stored in a managed Postgres database (Neon). Backups are encrypted at rest. Local-storage mirrors exist only in your own browser.
Found a security issue? Please email team@narwall.tech with a clear reproduction. We aim to acknowledge within 48 hours.