Several gates protect one Garden.

Remote reachability is not the same as family access.

Layered access

Cloudflare protects the connection. Rose Garden separately requires a valid family invitation or recovery, Garden membership, a paired device identity and route-level permission.

Anonymous addresses

Customer Garden subdomains are randomly generated and do not contain a purchaser’s surname or family name.

Safe updates

The update design requires an approved package, cryptographic signature and checksum before installation, with a protected snapshot of irreplaceable family data.

Responsible reporting

A dedicated security contact and response timetable will be published before closed beta. Do not send family media or secrets in an initial report.