Security FAQs
Frequently asked questions about security for your Bubble app.
By Rachel and 3 others4 authors17 articles
Bubble's security: FAQ
AI Privacy Rules Checker: FAQ
How do I protect user data?
What are Bubble’s security protocols for my app’s data?
How does Bubble deter and mitigate DDoS attacks?
Who owns my data?
How does Bubble handle individual apps' data privacy and security?
How long are Bubble's session cookie storage windows?
Can I disable SSL for my self-signed certificate in the API Connector?
Can Bubble employees access my App Data?
What are Bubble’s security standards?
How does Bubble help me stay compliant with data privacy laws?
What should I do if I discover a security breach in my app or another Bubble app?
If I check the "Limit access to this app in run mode with a username and password" box in the Settings tab, will this impact users trying to access my Live app?
Can I add security headers like "X-Content-Type-Options: nosniff" and "Strict-Transport-Security" to my app?
Can I enable or customize the "Access-Control-Allow-Origin" header?
How can I get more information about Bubble's security?