Share tokens are never stored
Links use high-entropy tokens. We store only a hash, so even our own systems cannot reproduce a link you have created.
Security
Built like a system that handles identity.
LeaseLever holds a small amount of sensitive information about you. Our approach is to hold even less, protect what remains, and hand you the controls.
Controls
Security properties, stated plainly.
These are the guarantees the product is designed around, not aspirations for a later release.
Every link expires
Share links last a maximum of 14 days, and you can revoke one instantly. Expired, revoked or invalid links reveal nothing at all.
Optional access codes
Add a code to any link. An incorrect code returns nothing, is rate limited and is recorded in the audit trail.
No discovery surface
There is no directory, no search and no public profile. Share, account and verification pages are excluded from search engines.
Strict account isolation
Database-level row security means every record is scoped to its owner. Access is enforced by the database, not just the interface.
Automated deletion
Nightly jobs erase expired shares, lapsed reference requests, dormant accounts and aged verification records on a published schedule.
Practices
How we operate.
Day-to-day practices that keep the guarantees above true.
Access attempts are rate limited
Repeated attempts against a share link or a sign-in are throttled within a rolling window.
Audit trail without personal data
Security events are recorded so we can investigate abuse, and are stripped of identifiers when an account is deleted.
Deletion you cannot undo
Deleting your account revokes every link and removes your data. Only an anonymous deletion log remains.
Server-side validation everywhere
Every write is validated on the server. The interface is never the only line of defence.
Responsible disclosure
Found something? Tell us.
If you believe you have found a security or privacy issue, contact us and we will respond. We do not pursue researchers acting in good faith.
Built in Ireland. Designed for renters everywhere.
Security you can inspect. Control you can feel.
Free to create. Private by default, and every link stays under your control.