Security
How Yeethook protects your credentials and connections.
Yeethook handles sensitive credentials on your behalf: your App Store Connect API key and your Slack and Discord webhook URLs. This section explains how we protect them.
Your p8 key is encrypted with AES-256-GCM at rest, never exposed in the UI, and only decrypted server-side for the brief moment needed to call Apple's API. Your Slack and Discord webhooks are encrypted at rest, post-only, and strictly one-way. You stay in control of both, and you can revoke access at any time.