====2. Secure Communications ====
There are no instances of sensitive communications over HTTP. Nor are there any leaks via XHR requests.
* js/feedback.js: need to know where feedbackObj (from currentSettings) comes from. because one of its fields is later used to perform a XHR POST request
** OK the only field filled with user input is “email” and its verified.
====3. Secure data storage ====