Privacy policy

App verification

This section describes the verification used by the Equine Solutions web and mobile applications.

We use self-hosted ALTCHA proof-of-work to help protect sign-in, public APIs and files from automated abuse. Your device performs a bounded computation in the background. Verification is handled by our API without an embedded browser or an external CAPTCHA service. Login and password-reset challenges are tied to the tenant, account identifier and action using a keyed fingerprint, without including the account identifier in the returned challenge.

The app stores a public access token on your device to reuse verification for up to six hours. Expired or rejected tokens are replaced automatically. This public token is separate from account sign-in.

Our infrastructure is hosted on Cloudflare. Normal network requests to our application and API include connection information such as your IP address. Verification proofs expire after 60 seconds.