Security at Cutspan

The anonymous calculation door does not need an account and does not create a saved project. It is rate-limited and separated from administrative access and the material shop.

Sign-in links are single-use. The resulting session is stored in a Secure, HttpOnly, SameSite cookie so page scripts cannot read the session token. You can sign out at any time.

Files retained beside an unsaved cut list live in this browser profile. They are not included in a public project link. Remove them before leaving a shared computer.

Project links are intentionally easy to share and are not passwords. They contain an unguessable token, expire after inactivity and should still be handled like a key.

Security does not make generated machine instructions physically safe. Tool numbers, depths, zero corner, clamping and travel limits must be checked on the actual machine.

Send suspected security issues privately to sales@uniboards.co.uk. Include safe reproduction steps and do not access other users’ data. We do not authorise destructive testing of production systems.