Your membership starts with trust
Security.
We protect accounts with server-validated sessions, club-specific permissions and checks on every membership and door action. Security is ongoing work.
Keep your account yours
Use a unique password and keep your sign-in and membership QR private. Enable two-factor authentication in Profile and save your recovery codes. You can also add a passkey on a trusted device; passkey sign-in requires its PIN or biometric verification. Review your passkeys and signed-in devices, remove keys you do not recognize and revoke unfamiliar sessions. Sign out on shared devices. If you suspect access by someone else, reset your password and contact support. A password reset revokes existing sessions; remove unfamiliar passkeys separately.
Reset password ↗Report a potential vulnerability
Email contact@x70.one with the affected page, a concise description and steps that demonstrate the issue using your own account and data. Include the expected and actual result. Redact personal information, credentials and membership QR values.
Send a security report ↗Respect other members
Do not access other people's data, interrupt the service, send unsolicited messages or perform payment tests using real funds. If you encounter data that is not yours, stop and report what you observed without copying or sharing it. This page does not grant permission for intrusive testing.
Club teams
Give each staff member only the role they need. Review access when someone leaves your team and transfer ownership to an authorized manager before closing an owner account. Contact support when you need help recovering access.