Security & Trust

1. Security Philosophy

At NotionGlaze, security is not an afterthought; it is built into every layer of our architecture. We understand that your Notion workspace contains sensitive and valuable information. Our mission is to provide a high-performance publishing engine without compromising the integrity of your data.

2. Infrastructure Security

Cloudflare Edge Network: NotionGlaze is built on Cloudflare's global edge network. This means your site is protected by enterprise-grade Web Application Firewalls (WAF), DDoS protection, and SSL/TLS encryption by default.

Serverless Architecture: By using Cloudflare Workers, we eliminate the risks associated with traditional persistent servers. Each request runs in an isolated sandbox, significantly reducing the attack surface.

3. Data Protection

Encryption at Rest: Sensitive information, including your Notion Access Tokens, is encrypted using industry-standard AES-256-GCM encryption before being stored in our database.

Encryption in Transit: All communications between your browser, our servers, and the Notion API are encrypted using TLS 1.2 or higher.

No Password Storage: We use OAuth 2.0 for authentication. NotionGlaze never sees or stores your Notion password.

4. Access Control (Least Privilege)

We adhere to the principle of least privilege. NotionGlaze only requests access to the pages and databases you explicitly share with our integration. We do not have access to your entire Notion workspace unless you choose to grant it.

5. Asset Shield & Privacy

Our "Global Asset Shield" mirrors your Notion images to our private, secure R2 storage. This prevents broken links and ensures that your assets are served through our secure CDN, masking the original Notion AWS URLs from public view.

6. Compliance & Audits

We regularly review our codebase for security vulnerabilities. Our payment processing is handled by Paddle.com, which is PCI DSS compliant, ensuring your financial data never touches our servers.

7. Reporting Vulnerabilities

We welcome reports from security researchers. If you believe you have found a security vulnerability in NotionGlaze, please contact us immediately at security@notionglaze.cc.