Account security.

Access is designed around private accounts and verified email addresses. Profile summaries and shared posts are available within the approved-member community.

Verified, approved access

A sign-up request does not immediately create an account. You must open an email verification link, choose a password, and receive approval before signing in. Passwords are stored using WordPress password hashing, not as readable text.

Layered abuse controls

Sign-up and account forms use browser-bound, expiring, single-use security checks, a hidden bot trap, and rate limits. Login attempts are throttled. These controls reduce automated abuse; no bot filter can guarantee blocking every automated request.

Member-only community

Profiles, posts, comments and shared media require a signed-in, approved account. They are not public visitor pages. Native WordPress comments, pingbacks and self-registration are disabled; the website FAQ is read-only.

Private records

Account data is scoped to the signed-in member. Other members see detailed workouts or weight-loss changes only if you enable those profile-sharing options. Actual body weights, personal notes, meals, strength baselines and private session photos are not included in those shares. Photos and videos you explicitly share on gym climbs are visible to approved members, and files are served only after an access check. Session and security cookies use secure connections. Password reset links expire, and changing a password ends existing sessions.

Your part

Use a unique password, keep access to your email secure, and sign out on shared devices. Do not forward verification or password reset links.