Security
Built for careful testing.
Ora’s account and sync system is a development service with production-oriented foundations: TLS, token storage, device sessions, and a server-side operation log.
Account access
The test flow uses email verification codes and device sessions. Apps store session secrets in platform secure storage where supported.
Sync design
Timer changes are sent as operations. Devices pull the server-ordered stream and apply it locally instead of streaming ticking seconds.
Current limitation
This is still an early test service. Treat it as development infrastructure until the account, backup, and release process is fully hardened.