How we think about security
Three surfaces matter:
- Identity: sign-in and sessions
- Access: private hubs, roles, paywalls, adult gates
- Payments: Stripe Connect
Creators choose what stays private, what appears on Explore, and what is paid. No system is perfectly secure; we keep improving the basics.
Accounts & access
- Sign-in via Firebase Authentication (email and supported providers).
- Collaborators use roles (OWNER, ADMIN, WRITE, COMMENT, READ). Roles guide
- Paid access unlocks under the Kahana account that completed checkout.
- Adult hubs need login and age verification. No anonymous “I'm 18” unlock.
- Help: in-app Support
Hubs & visibility
- Hubs start private.
- Public + listed on Explore is how work joins the library catalog. Listing checklist
- Public but unlisted: shareable by link; not treated like Explore-listed pages for discovery or SEO.
- Private collaboration is by invite, not open to the internet.
Adult content & age
- Creators set adult yes or no before listing.
- Adult hubs are hidden from default Explore and are not SEO-indexed like the rest of the library.
- Access requires sign-in and a date of birth proving 18+.
Payments
- Checkout runs on Stripe Connect. Kahana does not store full card numbers.
- Creators connect Stripe for payouts. A verified badge means charge-ready Connect, not Explore ranking.
- Platform fee: 5%, plus Stripe processing.
Infrastructure
- Web app over HTTPS
- Firebase for Auth, data, functions, and storage
- Stripe for payments
Production access is limited. We do not claim SOC 2 or ISO certification on this page unless we publish it separately.
Analytics
Product analytics (for example Mixpanel when enabled) help us improve the library. On this website, non-essential analytics follow your cookie choices. See the Privacy Policy.
Report an issue
Found a security or privacy problem? Use the contact form with steps to reproduce. Act in good faith, avoid harm, and give us time to fix before public disclosure.
FAQ
- Is Kahana a browser?
No. Kahana is the Digital Library at app.kahana.io. Older Oasis browser materials are not the current product.
- Do you sell personal data?
No. We earn from optional Growth plans and a fee on paid hub access, not by selling Personal Data.
- SOC 2 / ISO?
Not claimed here. We'll update this page if we publish certifications.
- Policies