Security

• Verified email. Sessions live in HttpOnly cookies — never in localStorage.
• You connect your own Telegram account via QR. We do not store passwords or OTPs.
• Telegram session files are encrypted at rest and deleted with your account.
• There is no shared music catalogue. Pulse never fetches a third-party store.
• Stripe, when enabled, runs in test mode until founding checkout is explicitly opened.