Everything we do today is on the server side and any communications between our servers and services is encrypted. I've discussed security a bit before but happy to address concerns as needed. That said again we're not going to explain in more detail what we're doing because cheaters will gladly use that to find ways around the systems and we don't have the resources to tackle that cat and mouse game.
We're very sensitive to privacy, if you notice we only have a "user experience" pixel on our site, when I first got here we were firing all sorts of stuff like Google and Facebook, I removed all those.