# Security & Data Handling Read-only Stripe scopes; in-memory processing; D1 stores only sessions/events/waitlist; HTTPS end-to-end.