Security

Account access

• Accounts are protected by email and password sign-in.
• New email addresses are verified before the account is fully active.
• Password resets are sent to the registered email address only.
• Application pages are only reachable while you are signed in.

Record separation

Every trip, document, visa record and report is stored with the identifier of the account that created it. Database access rules reject any attempt to read or change a record belonging to another account, including direct requests that bypass the interface.

Document storage

• Uploaded files are stored in a private area with no public links.
• Viewing or downloading a file creates a short-lived signed link that expires automatically.
• File types and sizes are validated before upload.
• Deleting a document removes the stored file as well as the record.

What we do not claim

StayTrack does not claim security certifications, independent audits, regulatory compliance or end-to-end encryption. Only the measures described on this page are in place.

Reporting a problem

If you believe you have found a security issue, please report it through the contact page and avoid sharing details publicly.

Independent service

StayTrack is an independent private service. It is not connected to, approved by or endorsed by the Home Office, GOV.UK or UK Visas and Immigration. StayTrack does not provide legal or immigration advice, uses the information you enter to produce organisational estimates only, and cannot guarantee the result of any immigration or citizenship application. Always verify current requirements through official sources or a qualified immigration adviser.