Security

Tintage is designed around hosted template rendering with predictable account, workspace, and render-job boundaries. The website handles accounts, docs, templates, products, and render history.

Template boundaries

Templates are stored as structured HTML, CSS, and configuration data. Public docs describe the supported widget attributes, safe editable fields, and external asset restrictions used during render workflows.

Website auth

Website accounts use Better Auth with email verification, password reset, session tracking, audit logs, rate limits, and optional Google sign-in when the provider credentials are configured.

Production database

Production data is stored in Postgres and accessed from Cloudflare Workers through Hyperdrive. The schema is defined with Drizzle, validated at app boundaries with Zod, and applied through the protected project workflow.