🔗 Looking for an explanation of the security arguments in your appeal? Check out Why security matters for your appeal — a technical explanation of HSTS, CSP, trackers, Schrems II and all other findings that PVResponse cites in your appeal.

Why passkeys?

At PVResponse, we use passkeys instead of passwords. Passkeys are the next generation of sign-in technology, developed by the FIDO Alliance and supported by Apple, Google and Microsoft.

No passwords = no risk. No passwords are ever stored or transmitted. Your passkey uses public-key cryptography: your device holds a private key that never leaves it. We only store a public key. Even in a data breach, no one can take over your account.

How does it work?

Passkeys use the WebAuthn/FIDO2 standard. When you sign in, your device confirms your identity via fingerprint, facial recognition or PIN. The cryptographic signature is verified by our server, but the private key never leaves your device.

Sign up in 3 steps

1

Create an account

Enter your email address, name and account type on the registration page. You will receive an email with a link to set up your passkey.

2

Set up your passkey

Click the link in the email. Your device will prompt you for confirmation via fingerprint, facial recognition or PIN. This takes just a few seconds.

3

Sign in

From now on, sign in with a single tap. No password needed — your device recognises you automatically.

Which devices support passkeys?

PlatformMethod
Windows 10/11Windows Hello (fingerprint, face, PIN)
macOS / iOSTouch ID / Face ID
AndroidFingerprint, facial recognition, screen lock
Hardware keysYubiKey, Titan Security Key, etc.

What if I lose my device?

You can add multiple passkeys to your account (e.g. phone + laptop). If you lose all your devices, contact info@pvresponse.be for account recovery.

Sign in with Google or Facebook

Besides passkeys, you can also register and sign in with your Google or Facebook account. This uses the secure OAuth 2.0 / OpenID Connect standard: you authenticate with the provider itself, so we never see or store your password. After your consent, we receive only your name and email address to create your account — no access to your wider profile, contacts or messages. You choose how you sign in: with a passkey or via one of these services. More details in our Privacy Policy.

Payments via Stripe

All payments are processed by Stripe, a certified PCI-DSS Level 1 payment provider. We never store card numbers, bank account numbers or any other payment credentials. We have no access to them either.

The payment fields (Bancontact, card, Apple Pay, Google Pay) are rendered by Stripe in its own secure frames on our page. What you type there goes straight to Stripe and never reaches our servers; we only receive a signed confirmation that the payment succeeded. Payments before September 2026 went through Mollie, also PCI-DSS Level 1.

Email delivery

Our emails — such as registration links, passkey invitations and invoices — are sent via Brevo (formerly Sendinblue), a specialised email platform with SPF, DKIM and DMARC authentication for optimal deliverability.

Despite these measures, an email may occasionally end up in your spam or junk folder. If you do not receive an expected email, please check that folder and mark the message as "not spam" so that future messages are delivered correctly.

Contact

Questions about security? info@pvresponse.be