Data protection basics for membership sites
Data protection basics for membership sites: mapping the data you hold, handling consent, and answering member requests to see or delete their data.
Security & Privacy
Protecting members, their data and your content.
Privacy policies and terms: what a membership site should cover
What a membership site privacy policy and terms of membership should cover, written in plain language members can actually read and trust.
Protecting your content from piracy, realistically
A realistic guide to protecting your membership content from piracy: what you cannot stop, what you can make harder, and how to respond to leaks.
Account sharing: protecting your membership without punishing honest members
How to spot and discourage account sharing on your membership site fairly, without locking out honest members who log in from several devices.
Password security for members and administrators
Practical password security for membership sites: sensible rules for members, a higher bar for administrators, password managers and safe resets.
A quarterly security review checklist
A quarterly security review checklist for membership sites: a ninety-minute routine covering access, logins, updates, backups, domains, payments and data.
Verifying identity when members contact support
Verifying identity when members contact support: match checks to the risk of each request, use safe methods and help members who lost access to their email.
Fraudulent sign-ups and card testing
Fraudulent sign-ups and card testing on membership checkouts: how to recognize an attack, respond while it is happening and make your checkout a poor target.
Protecting your payout and payment settings
Protecting your payout and payment settings from fraud: how criminals redirect payouts, and the alerts, checks and reconciliation habits that stop them.
Deciding how long to keep member data
Deciding how long to keep member data: a practical method for setting retention periods for accounts, payments, learning records, posts, logs and backups.