Security

Password Management

Your password is the first line of defense for your account. Here are the basics:

• Minimum 8 characters with a mix of uppercase letters, numbers, and special characters.
• Change your password anytime from the Security section in your account settings.
• Forgot your password? Use the "Forgot Password" link on the login page. We'll send a reset code to your registered email. The code expires after a short window for security.

Session Security

Opinyze uses secure, session-based authentication to keep your account safe:

• HttpOnly cookies - Your session token is stored in a cookie that JavaScript can't access, protecting against cross-site scripting attacks.
• Secure flag - Session cookies are only sent over encrypted HTTPS connections.
• Automatic expiry - Sessions expire after a period of inactivity. You'll need to log in again to continue.

If you're using a shared or public device, always log out when you're done. You can end your session by clicking Log Out in the sidebar.

Active Sessions

You can view and manage your active sessions from the Security section in your settings. If you see a session you don't recognize, you can revoke it individually. This is useful if you forgot to log out on another device or suspect unauthorized access.

If something looks suspicious, change your password immediately and revoke all other sessions.

Data Privacy

Your data is handled with care:

• NIN data is encrypted and never stored in plain text. We only retain what's needed for identity verification.
• Survey responses are anonymized before being shared with survey creators. Your personal identity is never attached to individual responses.
• Demographics are used for survey matching only and are not sold or shared with third parties.
• You can request a copy of your data at any time by contacting support.

For full details, read our Privacy Policy.

Deleting Your Account

If you'd like to leave Opinyze, you can request account deletion from the Security section in your settings. Here's what happens:

1. Pending credits - Withdraw any remaining credits before requesting deletion. Unclaimed credits cannot be recovered after deletion.
2. Confirmation - You'll need to confirm the request via email.
3. Grace period - There's a short grace period during which you can cancel the deletion.
4. Permanent removal - After the grace period, your account and associated data are permanently deleted.