Private access routes
Billing documents use long access tokens, are excluded from search and are generated dynamically. Access controls remain subject to continuing review.
SECURITY & TRUST
Protection is a
continuous practice.
FUNFLIX uses layered privacy and defensive controls across its website systems. No internet service can promise absolute security; we focus on reducing risk, verifying controls, responding responsibly and improving over time.
Validated requests
The current booking and contact implementation includes same-origin checks, input limits, anti-bot fields and rate limits.
Consent-led engagement
Optional behaviour tracking activates only after the visitor accepts optional cookies. New marketing providers require a separate configuration and consent review.
Separated credentials
Operational credentials are designed to be supplied through protected hosting secrets rather than client-facing website code.
Graceful recovery
Error boundaries, health checks and clear fallbacks are used to reduce the impact of unexpected failures.
Ongoing verification
Updates, backups, access reviews, monitoring and professional testing are continuing operational responsibilities, not one-time guarantees.
RESPONSIBLE REPORTING
Found a possible security issue?
Please send a clear, private report to support@funflix.co. Do not access, alter or publish customer data, and do not disrupt the service while testing.