Product
Accounts and sign-in
Signing in, invitations, passwords, members of an organisation and what the server keeps.
The hosted service, app.lightcurve.space, is open to signed-in users only. Each user has their own account; the account belongs to an organisation, and the organisation’s licence decides which modules its members get.
Sign in
Section titled “Sign in”Open app.lightcurve.space: without a session you land on the sign-in page, and after signing in you come back to the address you had opened — the simulation settings carried by a shared link included.
A session ends after 12 hours without activity, and in any case 7 days after signing in. Signing out (account menu, top right) ends it at once.
There is no self-service sign-up: accounts are opened by LightCurve when a subscription starts, then by the administrators of each organisation. Request a demo to get one.
Invitation and password
Section titled “Invitation and password”A new user receives an e-mail with a link, valid for 7 days, to choose their password. The password needs at least 10 characters; a phrase of several words is safer than a short complicated word.
Forgot your password? on the sign-in page sends a reset link, valid for one hour. The page gives the same answer whether the address has an account or not.
Changing the password (My account) closes every other session of the account.
The account menu
Section titled “The account menu”The chip with your initials, in the top bar of the simulator and of the Analysis module, opens the account menu:
| Entry | Does |
|---|---|
| Licence and features | The tier of your organisation, its end date, and the table of features by tier |
| My account | Name, password, licence of the organisation |
| Members of the organisation | For administrators: invite, disable, change roles |
| Sign out | Ends the session |
| Role | Can |
|---|---|
| Member | Use the application within the organisation’s licence |
| Administrator | Also invite members (within the number of seats), resend an invitation, disable or re-enable a member, make a member administrator |
| LightCurve team | Create organisations and set their licence: tier, add-on features, number of seats, end date |
A seat is an active account: disabling a member frees their seat at once and ends their sessions.
Licence of the organisation
Section titled “Licence of the organisation”The organisation’s tier and add-ons apply to all its members (see Licensing). Modules above the licence are not only hidden: the server does not send their code. When the licence ends, the application closes with a message, and the account pages stay open.
What the server keeps
Section titled “What the server keeps”The computation runs in your browser. Measurements, orbits, CAD models, analysis histories and results are read and processed locally, and never sent to the server.
The server keeps only the accounts — e-mail address, name, role, password hash (scrypt), last sign-in — the organisations and their licences, and a log of the administrative actions (invitations, licence changes, sign-ins), kept 12 months. IP addresses are never recorded: they stay in memory for 15 minutes to block repeated failed sign-ins. Accounts are deleted within 3 months of the end of the subscription. The hosted service runs in the European Union.
Security
Section titled “Security”- Passwords are stored as salted scrypt hashes; sessions and one-time links as SHA-256 digests of random tokens, so a copy of the database lets no one sign in.
- The session cookie is
HttpOnly,SecureandSameSite=Lax; forms are accepted only from the application’s own origin. - After repeated failed sign-ins, an address or a network is blocked for up to 15 minutes.
- Pages are served with a strict Content Security Policy, and cannot be embedded in another site.