Security Policy

Last updated: October 28, 2026

Overview

MineralCache, LLC (“MineralCache,” “we,” “us”) is committed to protecting the confidentiality, integrity, and availability of data entrusted to us. This Security Policy describes our security controls and the shared responsibilities between MineralCache and users of our Services.

Scope

This policy applies to the MineralCache marketplace and supporting systems that Process personal data and transactional information for vendors and buyers. It does not cover third-party sites linked from our Services.

Security program

Our application uses authorization checks, session controls, bounded recovery and dependency checks to protect access and data. Security also depends on provider configuration and operational practice. This page is not a certification, independent audit report or guarantee of uninterrupted service.

Encryption

• Production browser and app connections use HTTPS/TLS. Provider handoffs use their supported secure interfaces.
• The app protects sensitive session and recovery credentials with Android-backed encryption and uses private app storage for working files. Public media caches and preferences are not all separately encrypted by the app.
• Server credentials and signing secrets are kept outside public client payloads. Access is restricted through the configured service and account permissions.

Access control & authentication

• Server authorization checks use the current account, role and session binding for protected operations.
• Supported sign-in and account-security flows provide identity verification and multi-factor authentication.
• Logout retires local access and coordinates remote revocation; network failure can delay server/provider cleanup. Credentials should be protected until cleanup completes or the session expires.

Application security

• Input validation, access checks and bounded request processing protect supported application interfaces.
• Build and dependency checks help identify defects and known vulnerabilities; passing them is not proof that every vulnerability has been eliminated.
• Application updates can require new builds or deployment. Keep your app, browser and operating system current.

Infrastructure & network security

Cloud hosting, database, media, messaging and payment services have their own infrastructure controls. Availability, backup retention and recovery depend on the configured service plan and operational procedures. We do not promise a particular redundancy topology, restore-test cadence or recovery time through this Policy.

Payments

• Payments are processed by third-party providers (e.g., Stripe). MineralCache does not store raw payment card numbers or CVVs.
• We receive payment status and tokens from the provider for order reconciliation.

Monitoring & logging

Security and operational diagnostics support investigation, abuse controls and recovery. Application logging limits sensitive payloads; it is not a promise that providers process no network or device metadata. Do not send passwords, full payment-card details, access tokens or private keys in reports.

Vulnerability management

We review identified vulnerabilities and prioritize remediation by severity, exposure and practical impact. Dependency updates and configuration changes are evaluated before release.

Incident response

When an incident is identified, we investigate and take appropriate containment and recovery steps. Where legally required, we notify affected users or authorities. Reporting a suspected issue does not authorize access to another person's data or disruption of the Services.

Business continuity & disaster recovery

Recovery uses available backups, durable application records and documented operational procedures. Provider outages, pending cleanup and unfinished marketplace obligations can require additional recovery work. Backups are not a guarantee against every loss.

Data retention & deletion

Personal data is retained only as long as necessary to provide the Services, meet legal obligations, resolve disputes, and enforce agreements. Upon account closure or as otherwise required, data is deleted or anonymized within a commercially reasonable period, subject to lawful retention needs.

Third-party service providers

We use providers for hosting, storage, maps, communications, payments and live video. Their responsibilities depend on the applicable service terms and arrangements. See the Privacy Policy for the categories of processing and recipients.

Your responsibilities

• Protect your account credentials; use strong, unique passwords and enable MFA where available.
• Keep contact and shipping information accurate and up to date.
• Review vendor listings carefully and report suspicious activity.
• Comply with applicable laws, our Terms of Service, and this policy.

Responsible vulnerability disclosure

We welcome reports from the security community. If you believe you’ve found a vulnerability, email security@mineralcache.com with details sufficient for reproduction.

• Do not access, modify, or exfiltrate data that does not belong to you.
• Avoid privacy violations, service disruption, or degradation of our systems.
• Give us a reasonable time to investigate and remediate before public disclosure.
• Unauthorized automated scanning, DDoS, and social engineering are out of scope.

Changes to this policy

We may update this Policy to reflect changes in the Services or security practices. Material changes will be described through the applicable notice process; this page does not replace any consent required for personal-data processing.

Contact

MineralCache, LLC · P.O. Box 5, Llano, TX 78643, USA · security@mineralcache.com · info@mineralcache.com