Security & data handling

1. Transport security

mobiworth.in is served over HTTPS by the hosting platform, so searches and results are encrypted in transit.

• Every outbound link we generate must be an https: URL or we do not render it
• HSTS and certificate pinning are not enabled yet — we say so rather than claim them
• If your browser offers an http:// version of this site, prefer https://www.mobiworth.in

2. What we store

The database holds phone models, partner listings and deals. It holds nothing about you personally.

• Visitors need no account, so there is no public password or session store to leak; the only sign-ins are our own staff
• No payment, banking or identity information of any kind
• Search terms build the lookup and are not written to the database with your identity attached
• We count how often a deal link is opened so a deal page can show a real number instead of an invented one

3. Outbound links to partners

A quote or deal link is only rendered when its host matches the domain we registered for that partner. Anything malformed, or from an unknown host, is dropped rather than followed.

• Partner domains are declared in one file, so a bad crawl entry cannot become an open redirect
• Outbound links carry rel="sponsored noopener noreferrer"
• Links we are paid for include a MobiWorth referral tag; this is also stated on the disclaimer
• Once you are on a partner page, their security practices and payment handling are theirs, not ours

4. Claims we deliberately do not make

MobiWorth is a small comparison site. It has no security certification, and an earlier version of this page implied otherwise. The following are not claims we make:

• No 24/7 monitoring, intrusion detection, WAF or DDoS mitigation service is in place
• No penetration test, third-party audit or compliance certification exists
• No GDPR, CCPA or DPDP conformity assessment has been performed — we simply collect almost nothing
• No incident-notification deadline is promised, because we cannot guarantee one
• No “enterprise-grade” or “military-grade” security language appears anywhere on this site

5. Your side of the bargain

We do not buy your device, so the checks that matter happen on the partner's side. Before you hand one over:

• Read the partner's own page for its data-erasure process; do not assume it wipes the device
• Sign out of cloud accounts and remove your SIM and memory card before pickup
• Confirm the payout on the partner's site — a MobiWorth figure is what their page printed when we asked
• Never pay a “verification fee” to anyone claiming to be a buyback agent

6. Report a problem

If you find a broken link, a destination that does not match the partner, or a figure that looks invented, write to hi@hasanx.in or use the contact page. We will not promise a response window we cannot keep — but we do read these and we fix what is reproducible.