Email-only identity
Member and affiliate login use the verified email address. Contact mobile numbers are not accepted as login credentials.
Trust and security
Security begins with clear account boundaries.
Xniffer separates member, affiliate and admin access, verifies sensitive account changes and keeps payment activation under backend control.
OTP-protected recovery
Registration, password recovery and verified email changes use time-limited OTP checks. A newly issued OTP replaces the previous code.
Server-verified access
Trial, Prime, expiry and unlocked learning days are calculated by the backend rather than editable browser storage.
Payment verification
Membership activates only after the backend verifies the Razorpay order and payment response. Failed or abandoned checkout does not unlock access.
Session protection
Passwords are not stored in the browser. Password changes revoke older sessions, and inactive authenticated sessions are closed automatically.
Traceable support
Registered members use account-linked tickets so replies, payment references and resolution history remain attached to the correct account.
Protect your account
- Use a unique password that is not reused on another service.
- Never share an email OTP, password, payment OTP or complete card details.
- Log out on shared devices and keep the registered email account secure.
- Report unexpected access or account changes through Support.
Report a security concern
Before registration, contact support@xniffer.com. Registered members should create a ticket from their dashboard so the report is tied to the verified account.