Your password is hashed with bcrypt (cost factor 12) before being stored. Bcrypt is a deliberately-slow hashing algorithm designed to resist brute-force attacks even if the database is compromised.
We never store, log, or transmit your plaintext password. When you log in, we hash the password you typed and compare it to the stored hash — never the other direction.
Looking for your own record?
Everything we hold about you is one e-mail away, with a download and switches for each consent.