Security

Most of the functionality of FeedbackPRO is interfacing back and forth with external services and API's, which are normally hosted somewhere on the Internet.

Even though this package's abstract core design allows to send any data or file to any API endpoint, security and regulations should always come first. To be fully transparent, FeedbackPRO itself (as a package) does not contain any way to record, store or send any data or files to any third-party service, including any analytics or tracking services.

FeedbackPRO (as an asset) and it's developers are not responsible for any secret or confidential data and/or file, secrets or tokens that may be made publicly available with the use of FeedbackPRO or any of it's features. You are fully responsible for the integrations and services used in your project, and what data and/or files are sent to them.

Make sure to check each integration's security section before implementing or configuring them. Most (but not all) integrations require some sort of authentication, and like any other asset or code in your project, it can be extracted and decompiled from built projects by any third-party with enough knowledge and intent.

Each supported integration encrypts any secrets by default using an EncryptedString, and comes with security information and mitigation plans on how to keep authentication tokens and API keys relatively safe.

Important

It is highly recommended to modify the encryption key, which can be found at EncryptedString.Key.
Either modify the hardcoded key from the file, or call EncryptedString.Key = "XXXXXX" anywhere in your code before any call to FeedbackPRO is done.

If your project is expected to reach a big audience and you are concerned with security, it is highly recommended to use a private proxy server that would contain authentication secrets and talk with third-party services by itself. FeedbackPRO fully supports this type of integration, and the "Example API" included in the Demo folder is a good example on how to route your data securely through a server.

Feel free to reach out by email for any questions and/or support regarding security and/or an insight on how to setup a proxy server to work with FeedbackPRO.