← All features
GDPR, security, and privacy. Already done
Cookie banner, consent-gated analytics, data export, password hashing, rate limiting.
Greek and EU customers can fine you for getting GDPR wrong. Buklot ships with the legal stuff handled: a cookie banner that gates analytics until consent, per-client data export at the click of a button, the right-to-be-forgotten flow.
On the security side: PBKDF2 password hashing (not bcrypt, for Hostinger compatibility), HMAC-signed tokens for cancel/reschedule links, two-layer rate limiting on login + form endpoints, CSP headers to block injection, audit log for forensics.
Highlights
- Consent-gated cookie banner (GA, Meta Pixel)
- Per-client GDPR data export
- PBKDF2 password hashing
- HMAC-signed cancel/reschedule tokens
- Two-layer rate limiting
- CSP headers + admin audit log