Updated: 3. 11. 2026

Security

This is a summary of safe use, not a guarantee that systems are free of vulnerabilities or always available.

Application safeguards

The websites use HTTPS. Passwords are hashed; login sessions use an HttpOnly cookie with a limited lifetime. Business access is checked by company and user role. Changes also require request-forgery protection. Login and public APIs have request rate limits, and uploads are checked for allowed formats and sizes. Data and media have backups, and infrastructure access is restricted.

Your responsibilities

Use a strong, unique password, review company users regularly and sign out on shared devices. Do not upload secrets or identity documents to public catalogs. A published product link or QR code is not a confidentiality control: anyone who obtains it may open the public content.

Report a vulnerability or incident

Email info@ogledar.si with subject “OgledAR security”. Include the affected URL, time, safe reproduction details and your contact. Do not send passwords, session tokens or other people's personal data. Do not access other users' data or run load or destructive tests without agreement.

We review reports and take appropriate containment, remediation and legally required notification steps for confirmed incidents. This notice does not establish a reward program or authorize otherwise unauthorized testing.