Frequently Asked Questions

A Suloro Account is your Single Sign-On (SSO) identity across the entire Suloro digital ecosystem and connected third-party platforms. It gives you a single, highly secure profile where you can manage credentials, connected apps, privacy settings, and developer client credentials.

Yes. The Suloro Account Chooser allows you to store and switch between multiple accounts seamlessly on a single browser. Each account session maintains strict cryptographic isolation, ensuring one account cannot access the active tokens or data of another.

Date of birth is collected solely for age-verification compliance under international child privacy protection laws. Once set, it cannot be changed arbitrarily without identity verification, preventing account hijacking or age falsification.

Suloro enforces strict password hashing using memory-hard cryptographic key derivation functions. Passwords are never saved in plaintext, are never logged, and are shielded against GPU/ASIC brute-force dictionary attacks.

When you update your password in the Security settings, all active authentication tokens and refresh tokens across all devices are immediately invalidated. Anyone who had an active session on another device is signed out instantaneously.

Suloro employs adaptive exponential rate limiting. After multiple consecutive failed password attempts, authentication requests are temporarily locked for escalating intervals (30s, 60s, 120s, 300s, up to 900s) to prevent automated credential stuffing.

No. Suloro operates on a strict zero-ad-tracking and zero-data-sales policy. We do not embed behavioral advertising scripts, commercial tracking pixels, or cross-site fingerprinting mechanisms.

You can permanently delete your Suloro Account directly inside your Suloro Account dashboard. Navigate to the Data & Privacy section, scroll down to the bottom of the page, and click the Delete Account button. After entering your password to confirm, your account, profile data, active sessions, and registered OAuth applications are permanently and irreversibly purged from active databases.

The Developer Console allows engineers and developers to register OAuth 2.0 client credentials. This enables third-party web apps and platforms to offer "Sign in with Suloro" to their users securely.

To register an application, developers must provide:

• Application Name: A clear, non-deceptive brand name.
• 1:1 Application Logo: A square brand icon or logo for the consent screen.
• Authorized Redirect URIs: Whitelisted callback URLs where tokens are securely returned.
• Privacy Policy & Terms URLs: Valid, accessible public policy links explaining how user data is handled.

Your Client Secret must always remain strictly confidential on your backend servers. Never expose your Client Secret in public client-side JavaScript, GitHub repositories, or mobile app binaries.

The Linked Apps section displays all third-party websites and applications that you have granted authorization to access your Suloro profile claims (such as Name, Email, or Date of Birth).

Navigate to Linked Apps in your dashboard and click Remove next to the desired application. Its authorization token will be immediately revoked, preventing any future data access until you re-authorize it.

On the sign-in page, click "Forgot password?" to receive a secure, time-limited password reset link delivered directly to your registered email address.

For all inquiries, account assistance, security reports, or technical queries, contact us at: