Last updated October 13, 2026
Protecting website requests
The request service validates incoming data on the server, checks a session-bound token and request origin, limits repeated requests, and rejects unexpected payment methods, product identifiers and quantities. Prices are calculated from the server’s catalog rather than trusted from the browser. These protections are part of this implementation, not a claim that every threat has been eliminated.
Private storage
Request details are encrypted and kept outside the public website directory. The management tool runs from the hosting account’s command line; there is no public admin login or publicly browsable order archive. The encryption key must remain outside public files and backups must receive equivalent access protection.
Your part in staying safe
Use a current browser and check that the final live website address uses HTTPS. Do not send passwords, payment-card data or banking-login information through a form. Verify unexpected payment-instruction changes using the established business contact. Avoid entering personal information on a shared device unless you can close the session afterward.
Reporting a suspected issue
Use Contact Us and select General question, or contact support@pumpthefuel.com with the subject “Security report”. Describe the affected page, the type of issue and steps that reproduce it without exposing other people’s information. Do not include a working credential, private customer record or unnecessary personal data in your report.
Testing boundaries
Do not access another customer’s information, alter or delete data, overwhelm the service, send bulk submissions, attempt phishing, or test third-party systems through this website. Stop if you encounter personal information and report the minimum necessary detail. This page does not grant permission to violate laws or third-party terms.
Maintenance and incident response
The website owner must keep PHP and hosting software updated, protect the hosting account with multi-factor authentication, review private request notifications and logs, maintain tested backups, and run retention cleanup. If an incident occurs, investigate, restrict affected access, preserve necessary evidence and assess applicable notification duties. Send security follow-up questions to support@pumpthefuel.com.
Contact Us · Privacy policy · Terms of use · Payment information