Help > Security
At Goodreads we take the security of our users and their data very seriously.
For security issues related to a single account please contact Customer Care. This includes such items as:
- Unauthorized account access
- Spam
- Copyright infringement
- Harassment
For security issues that affect a large number of Goodreads users please contact our security team at security@goodreads.com. This includes such items as:
- CSRF
- XSS
- improper access controls
- API flaws
All Goodreads pages that collect private information are secured through SSL. SSL is a browser security layer that ensure the information is being sent from your browser to our webservers in an encrypted, secure manner.
All pages are encrypted with SSL once you are signed in. You can tell if you are on a SSL page by seeing in your browser bar if the page starts with https instead of http. Also, some forms (like our sign in form on the signed out homepage) can submit directly to a SSL page, so you may not see it in the browser bar.
You can optionally store your credit card on file with Goodreads when using products such as ebooks and self-serve advertising. Goodreads uses a large, secure, 3rd party named Braintree Payment Solutions to store and process credit cards. Goodreads, including all our employees, never have access to your credit card information. Braintree is PCI complaint, and handles payment infrastructure for many large companies.
Goodreads does not conduct unsolicited telephone communications or promotions. If you believe you have received an unsolicited phone call from Goodreads, we recommend that you do not pick up the phone or provide any personal information. Please email us at support@goodreads.com to report any activity of this nature.
